CVE-2017-2869

An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2017-2861

An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out of bounds read resulting in a denial of service. An attacker can send a malicious packet to trigger...

CVE-2017-2867

An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can a malicious packet to trigger this vulnerability...

CVE-2017-2868

An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2017-2853

An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in arbitrary command execution. An attacker can send a malicious packet to trigger this...

CVE-2017-2867

An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can a malicious packet to trigger this vulnerability...

CVE-2017-2868

An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2017-2869

An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2017-2853

CVE-2017-2853 affects Natus Xltek NeuroWorks 8. During processing of the command RequestForPatientInfoEEGfile, the NWStorage component builds a file path from a client-supplied value and uses a stack buffer in a sprintf call, which can overflow and overwrite the SEH chain. This leads to remote co...

CVE-2017-2861

CVE-2017-2861 is tied to Natus Xltek NeuroWorks 8. Talos reports show a Denial of Service in the NewProducerStream command, where a parsing error in the KeyTree leads to a returned -1 value that is then used by List.Head, triggering an access violation (out-of-bounds read) and DoS. The vulnerabil...

CVE-2017-2868

CVE-2017-2868 is a vulnerability in the NewProducerStream functionality of Natus Xltek NeuroWorks 8 . The issue stems from parsing a user-provided KeyTree, specifically an unchecked length for the SlowReviewLocalPath used to construct a path, which can overflow a stack buffer and overwrite except...

CVE-2017-2867

TALOS reports CVE-2017-2867 as a vulnerability in Natus Xltek NeuroWorks 8 (SavePatientMontage). It is caused by a lack of verification of the length of Data.Name in requests to SavePatientMontage, leading to a stack-based buffer overflow that can enable remote code execution via a specially craf...

CVE-2017-2869

CVE-2017-2869 is a code execution vulnerability in Natus Xltek NeuroWorks 8 OpenProducer. Talos reports a stack-based buffer overflow caused by improper handling of SlowReviewLocalPath data within the KeyTree during OpenProducer processing, which can be triggered remotely by sending a crafted net...

CVE-2017-2869: Out-of-bounds Write

An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2017-2868: Out-of-bounds Write

An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability...

PT-2018-7205

Name of the Vulnerable Software and Affected Versions: Natus Xltek NeuroWorks version 8 Description: A Code Execution issue exists in the RequestForPatientInfoEEGfile functionality. It can be triggered by a specially crafted network packet, causing a stack buffer overflow and resulting in arbitra...

PT-2018-7214

Name of the Vulnerable Software and Affected Versions: Natus Xltek NeuroWorks version 8 Description: A code execution issue exists in the NewProducerStream functionality. It can be triggered by a specially crafted network packet, causing a stack buffer overflow that results in code execution. An...

CVE-2017-2861: Out-of-bounds Read

An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out of bounds read resulting in a denial of service. An attacker can send a malicious packet to trigger...

CVE-2017-2867: Out-of-bounds Write

An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can a malicious packet to trigger this vulnerability...

PT-2018-7213

Name of the Vulnerable Software and Affected Versions: Natus Xltek NeuroWorks version 8 Description: A code execution issue exists in the SavePatientMontage functionality. It can be triggered by a specially crafted network packet, causing a stack buffer overflow that results in code execution. An...