Natus Medical Incorporated Natus vulnerabilities

CVE-2017-2853 [CRITICAL] CWE-787 CVE-2017-2853: An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in arbitrary command execution. An attacker can send a malicious packet to trigger this vulnerability.

CVE-2017-2869 [CRITICAL] CWE-787 CVE-2017-2869: An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability.

CVE-2017-2868 [CRITICAL] CWE-787 CVE-2017-2868: An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus X An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability.

CVE-2017-2867 [CRITICAL] CWE-787 CVE-2017-2867: An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can a malicious packet to trigger this vulnerability.

CVE-2017-2861 [HIGH] CWE-125 CVE-2017-2861: An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProduce An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out of bounds read resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.