Natus Xltek NeuroWorks

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Natus Medical, Inc. Natus Equipment: Natus Xltek NeuroWorks software Vulnerabilities: Stack-Based Buffer Overflow, Out-of-Bounds Read 2. RISK EVALUATION Successful exploitation of these...

CVE-2017-2860

An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this...

CVE-2017-2860

CVE-2017-2860 is an out-of-bounds-read denial-of-service vulnerability in Natus Xltek NeuroWorks 8, specifically in the KeyTree lookup entry handling. A specially crafted network packet can cause a crash when the first KeyTree element is not an ItemList, leading to an access violation and DoS. Th...