Description
An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in arbitrary command execution. An attacker can send a malicious packet to trigger this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Natus Medical | Natus | Natus Xltek NeuroWorks 8 | — |
Advisories 1
- ICSMA-18-165-01 Natus Xltek NeuroWorks CISA ICS & IT advisories · Jun 14, 2018