← Back to browse · API

CVE-2017-2868

Severity
CRITICAL
CVSS
10.0
EPSS
0.0259
Risk score
40.91
CISA KEV
No
PoC
No
Published
2018-04-05
Modified
2024-09-16
First seen
2026-08-07
Aliases
EUVD-2017-12009, GHSA-Q5P9-C4J3-Q646
Products
Natus Medical Incorporated:Natus Natus Xltek NeuroWorks 8
Sources
euvd EUVD-2017-12009

Description

An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability.

References