Security Advisory

CVE-2017-2853

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-04-05 19:00:00
Last updated 2024-09-17 01:47:00
Assigner talos
CVSS score 10.0
State PUBLISHED

Description

An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in arbitrary command execution. An attacker can send a malicious packet to trigger this vulnerability.