Priority MEDIUM 45
Natus NeuroWorks and SleepWorks before 8.4 GMA3 utilize a default password of xltek for the Microsoft SQL Server service sa account, allowing a threat actor to perform remote code execution, data exfiltration, or other n…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01414 · Published 2023-11-10 · No fix listed CWE-798
Priority LOW 36
An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01366 · Published 2018-06-01 · No fix listed CWE-125
Priority LOW 36
An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks 8.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01469 · Published 2018-06-01 · No fix listed CWE-125
Priority LOW 36
An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek NeuroWorks 8.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01366 · Published 2018-06-01 · No fix listed CWE-125
Priority MEDIUM 47
An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02616 · Published 2018-04-05 · No fix listed CWE-787
Priority MEDIUM 47
An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02541 · Published 2018-04-05 · No fix listed CWE-787
Priority MEDIUM 46
An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02236 · Published 2018-04-05 · No fix listed CWE-787
Priority LOW 36
An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in Natus Xltek NeuroWorks 8.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01399 · Published 2018-04-05 · No fix listed CWE-125
Priority MEDIUM 48
An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek NeuroWorks 8.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0332 · Published 2018-04-05 · No fix listed CWE-787