CVE-2017-2868

CRITICAL

An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability.

Published: Apr 5, 2018 Modified: Jun 17, 2026

CWE-787

CVSS Metrics

CVSSv3

Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (1)

Vendor	Product	Version
natus	xltek_neuroworks	8

GitHub Security Advisory GHSA-q5p9-c4j3-q646

An exploitable code execution vulnerability exists in the NewProducerStream functionality of...

References (4)

http://www.securityfocus.com/bid/104490 Broken Link
https://talosintelligence.com/vulnerability_reports/TALOS-2017-0374 Third Party Advisory
http://www.securityfocus.com/bid/104490 Broken Link
https://talosintelligence.com/vulnerability_reports/TALOS-2017-0374 Third Party Advisory

Risk Scores

CVSS Score 9.8 / 10

EPSS Score 2.59%

Top 16% most likely to be exploited

Threat Score 40 / 100

Data Sources

NVD EPSS GitHub