TI-2017-02074 CVE-2017-2853 · GHSA-mqcq-679q-9mcm
Out-of-bounds write in Natus
Priority MEDIUM 48
An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek NeuroWorks 8.
Natus Medical Incorporated
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Natus Medical Incorporated records in CISA KEVNo Natus Medical Incorporated vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in Xltek Neuroworks · all components
TI-2017-02089 CVE-2017-2869 · GHSA-ffvp-5qc7-5pr5
Out-of-bounds write in Natus
Priority MEDIUM 47
An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8.
TI-2017-02088 CVE-2017-2868 · GHSA-q5p9-c4j3-q646
Out-of-bounds write in Natus
Priority MEDIUM 47
An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8.
TI-2017-02087 CVE-2017-2867 · GHSA-pwv9-2w3m-5m4w
Out-of-bounds write in Natus
Priority MEDIUM 46
An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8.
TI-2017-02081 CVE-2017-2861 · GHSA-2xw9-hxc2-p853
Out-of-bounds read in Natus
Priority LOW 36
An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in Natus Xltek NeuroWorks 8.
TI-2017-02080 CVE-2017-2860 · GHSA-h48w-gwfx-2299
Out-of-bounds read in Talos Natus
Priority LOW 36
An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8.
TI-2017-02079 CVE-2017-2858 · GHSA-r5jr-wmvp-xf5v
Out-of-bounds read in Talos Natus
Priority LOW 36
An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks 8.
TI-2017-02073 CVE-2017-2852 · GHSA-h76f-7p84-2jf9
Out-of-bounds read in Talos Natus
Priority LOW 36
An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek NeuroWorks 8.