Skip to content
OpenAdvisories
Critical · 9.0 CVE-2017-2867 EUVD-2017-12008GHSA-pwv9-2w3m-5m4w

An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8. A specially crafted…

Published Apr 5, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can a malicious packet to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Natus Medical Natus Natus Xltek NeuroWorks 8 —

Advisories 1

References