Natus Xltek NeuroWorks

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Natus Medical, Inc. Natus Equipment: Natus Xltek NeuroWorks software Vulnerabilities: Stack-Based Buffer Overflow, Out-of-Bounds Read 2. RISK EVALUATION Successful exploitation of these...

CVE-2017-2858

CVE-2017-2858 affects Natus Xltek NeuroWorks 8. The TALOS advisory TALOS-2017-0362 describes an out-of-bounds read vulnerability in the ItemList traversal during network data handling in NeuroWorks 8, which can be triggered by a specially crafted network packet to cause a denial-of-service via an...