Natus Xltek NeuroWorks

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Natus Medical, Inc. Natus Equipment: Natus Xltek NeuroWorks software Vulnerabilities: Stack-Based Buffer Overflow, Out-of-Bounds Read 2. RISK EVALUATION Successful exploitation of these...

CVE-2017-2852

An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this...

CVE-2017-2852

Natus Xltek NeuroWorks 8 is affected by CVE-2017-2852 through an out-of-bounds read in the NWStorage unserialization of itemlist data, triggered by specially crafted network packets and causing a denial of service. The TALOS advisory details the vulnerability in the NWStorage path used with Neuro...