The vulnerability arises from improper validation of the session_id length and ciphersuite-list length in the DTLS ClientHello parser of NetX Duo. Specifically, the parser uses the total record length instead of the remaining bytes to validate the ciphersuite-list length. This flaw allows an unauthenticated remote attacker to trigger an out-of-bounds read of up to 255 bytes from adjacent process memory. The leaked memory is sent back verbatim in the ServerHello message, resulting in information disclosure. Additionally, a crash can occur on the first packet due to this flaw.

An unauthenticated remote attacker can exploit this vulnerability to read sensitive adjacent memory from the affected process, leading to potential information disclosure. The vulnerability also has a crash variant that can cause denial of service on the first packet. There is no indication of privilege escalation or code execution from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor the Eclipse Foundation's advisories for updates and apply patches once available.