Natus NeuroWorks and SleepWorks before 8.4 GMA3 utilize a default password of xltek for the Microsoft SQL Server service sa account, allowing a threat actor to perform remote code execution, data exfiltration, or other nefarious actions such as tampering with data or destroying/disrupting MSSQL services.
CPE | Name | Operator | Version |
---|---|---|---|
neuroworks_eeg | lt | 8.4 | |
neuroworks_eeg | eq | 8.4 | |
sleepworks | lt | 8.4 | |
sleepworks | eq | 8.4 |