Natus Xltek NeuroWorks

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Natus Medical, Inc. Natus Equipment: Natus Xltek NeuroWorks software Vulnerabilities: Stack-Based Buffer Overflow, Out-of-Bounds Read 2. RISK EVALUATION Successful exploitation of these...

CVE-2017-2868

CVE-2017-2868 is a vulnerability in the NewProducerStream functionality of Natus Xltek NeuroWorks 8 . The issue stems from parsing a user-provided KeyTree, specifically an unchecked length for the SlowReviewLocalPath used to construct a path, which can overflow a stack buffer and overwrite except...

CVE-2017-2868

An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability...