PT-2018-7214
CVE-2017-2868
·
Published
2018-04-05
·
Updated
2022-06-03
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Natus Xltek NeuroWorks version 8
Description:
A code execution issue exists in the NewProducerStream functionality. It can be triggered by a specially crafted network packet, causing a stack buffer overflow that results in code execution. An attacker can exploit this by sending a malicious packet.
Recommendations:
For version 8, consider disabling the NewProducerStream functionality until a patch is available to prevent potential code execution. Restrict access to the network to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾