Skip to content
OpenAdvisories
Critical ICSMA-18-165-01 8 CVEs

Natus Xltek NeuroWorks

Published Jun 14, 2018 · Updated Jun 14, 2018

Vendor: Natus Medical, Inc. (Natus) Product: Natus Xltek NeuroWorks

Summary

Successful exploitation of these vulnerabilities require access to the Natus customer network, and could crash the device being accessed; a buffer overflow condition may allow remote code execution.

Vulnerabilities 8

  • Critical 10.0
    CVE-2017-2853

    An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek Neu…

    Natus Medical Natus
  • Critical 10.0
    CVE-2017-2868

    An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. …

    Natus Medical Natus
  • Critical 10.0
    CVE-2017-2869

    An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8. A spe…

    Natus Medical Natus
  • Critical 9.0
    CVE-2017-2867

    An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8.…

    Natus Medical Natus
  • High 7.5
    CVE-2017-2852

    An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek Neur…

    Talos Natus
  • High 7.5
    CVE-2017-2858

    An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks…

    Talos Natus
  • High 7.5
    CVE-2017-2860

    An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek Neur…

    Talos Natus
  • High 7.5
    CVE-2017-2861

    An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in …

    Natus Medical Natus

Revision history

  1. #1

    ICSMA-18-165-01 Natus Xltek NeuroWorks

References