#Natus neuroworks eeg full#

#Natus neuroworks eeg full#

Exploitation would allow an attacker to trigger a buffer overflow and execute arbitrary code, allowing the attacker to take full control of the affected system.

Please see the HIPAA Journal Privacy PolicyĬVE-2017-2868 and CVE-2017-2869 relate to flaws in how the program parses data structures. The vulnerabilities are a combination of stack-based buffer overflow and out-of-bounds read vulnerabilities.ĬVE-2017-2853 would allow an attacker to cause a buffer overflow by sending a specially crafted packet to an affected product while the product attempts to open a file requested by the client. Three of the vulnerabilities – tracked as CVE-2017-2853, CVE-2017-2868, and CVE-2017-2869 – have been assigned a CVSS v3 base score of 10, the highest possible score. If the vulnerabilities are successfully exploited they could allow a malicious actor to crash a vulnerable device or trigger a buffer overflow condition that would allow remote code execution.Īll eight vulnerabilities have been assigned a CVSS v3 score above 7.0 and are rated high. ICS-CERT has issued an advisory following the discovery of eight vulnerabilities in version 8 of Natus Xltek NeuroWorks software used in Natus Xltek EEG medical products. Advisory Issued After 8 Vulnerabilities Discovered in Natus Xltek NeuroWorks Software