Natus vulnerabilities
9 vulnerabilities
Known vulnerabilities in Natus products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Xltek Neuroworks8 vulnerabilities
- Neuroworks Eeg1 vulnerabilities
- Sleepworks1 vulnerabilities
CVE-2017-2860natusxltek_neuroworks+1
EPSS score1.37%
An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.CVE-2017-2858natusxltek_neuroworks+1EPSS score1.47%
An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.CVE-2017-2853natus medical incorporatednatus+1EPSS score3.32%
An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in arbitrary command execution. An attacker can send a malicious packet to trigger this vulnerability.CVE-2017-2868natus medical incorporatednatus+1EPSS score2.54%
An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability.CVE-2017-2867natus medical incorporatednatus+1EPSS score2.24%
An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can a malicious packet to trigger this vulnerability.CVE-2017-2852natusxltek_neuroworks+1EPSS score1.37%
An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.CVE-2017-2869natus medical incorporatednatus+1EPSS score2.62%
An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability.CVE-2017-2861natus medical incorporatednatus+1EPSS score1.40%
An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out of bounds read resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.CVE-2023-47800natusneuroworks_eeg+1EPSS score1.41%
Natus NeuroWorks and SleepWorks before 8.4 GMA3 utilize a default password of xltek for the Microsoft SQL Server service sa account, allowing a threat actor to perform remote code execution, data exfiltration, or other nefarious actions such as tampering with data or destroying/disrupting MSSQL services.