natus records

9 published records for vendor natus.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2017-2853No exploit	An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek NeuroWorks 8.natus · xltek neuroworks · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	3.3%	Apr 5, 2018
40Plan	CVE-2017-2869No exploit	An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8.natus · xltek neuroworks · CWE-787 Pre-auth Memory safety	Critical9.8	—	2.6%	Apr 5, 2018
40Plan	CVE-2017-2868No exploit	An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8.natus · xltek neuroworks · CWE-787 Pre-auth Memory safety	Critical9.8	—	2.5%	Apr 5, 2018
40Plan	CVE-2017-2867No exploit	An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8.natus · xltek neuroworks · CWE-787 Pre-auth Memory safety	Critical9.8	—	2.2%	Apr 5, 2018
39Monitor	CVE-2023-47800No exploit	Natus NeuroWorks and SleepWorks before 8.4 GMA3 utilize a default password of xltek for the Microsoft SQL Server service sa account, allowinnatus · neuroworks eeg · CWE-798 pre-auth RCE Hard-coded credentials	Critical9.8	—	1.4%	Nov 10, 2023
30Monitor	CVE-2017-2858No exploit	An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks 8.natus · xltek neuroworks · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	1.5%	Jun 1, 2018
30Monitor	CVE-2017-2861No exploit	An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in Natus Xltek NeuroWorknatus · xltek neuroworks · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	1.4%	Apr 5, 2018
30Monitor	CVE-2017-2852No exploit	An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek NeuroWorks 8.natus · xltek neuroworks · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	1.4%	Jun 1, 2018
30Monitor	CVE-2017-2860No exploit	An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8.natus · xltek neuroworks · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	1.4%	Jun 1, 2018

CVE-2017-2853
40Plan
An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek NeuroWorks 8.
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Memory safety
natus · xltek neuroworksApr 5, 2018
CVE-2017-2869
40Plan
An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8.
CriticalCVSS 9.8No exploitEPSS 3%
- Pre-auth
- Memory safety
natus · xltek neuroworksApr 5, 2018
CVE-2017-2868
40Plan
An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8.
CriticalCVSS 9.8No exploitEPSS 3%
- Pre-auth
- Memory safety
natus · xltek neuroworksApr 5, 2018
CVE-2017-2867
40Plan
An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
natus · xltek neuroworksApr 5, 2018
CVE-2023-47800
39Monitor
Natus NeuroWorks and SleepWorks before 8.4 GMA3 utilize a default password of xltek for the Microsoft SQL Server service sa account, allowin
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Hard-coded credentials
natus · neuroworks eegNov 10, 2023
CVE-2017-2858
30Monitor
An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks 8.
HighCVSS 7.5No exploitEPSS 1%
natus · xltek neuroworksJun 1, 2018
CVE-2017-2861
30Monitor
An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in Natus Xltek NeuroWork
HighCVSS 7.5No exploitEPSS 1%
natus · xltek neuroworksApr 5, 2018
CVE-2017-2852
30Monitor
An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek NeuroWorks 8.
HighCVSS 7.5No exploitEPSS 1%
natus · xltek neuroworksJun 1, 2018
CVE-2017-2860
30Monitor
An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8.
HighCVSS 7.5No exploitEPSS 1%
natus · xltek neuroworksJun 1, 2018