CVE-2017-2853: An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Nat...

Security readout for executives and security teams

CVE-2017-2853 is a critical remote code execution issue in Natus Xltek NeuroWorks 8. A malicious network packet can trigger a stack buffer overflow in patient EEG file request handling, potentially letting an unauthenticated attacker run arbitrary commands. This is urgent where affected clinical systems are reachable on a network. Exposure is limited to environments running Natus Xltek NeuroWorks 8, especially clinical or diagnostic networks where the affected functionality is reachable by other hosts. The bundle does not identify other affected versions or products. Treat this as a high-priority clinical network risk. Remote unauthenticated code execution on medical workflow systems can create patient-care disruption, data exposure, and incident response complexity. Prioritize finding affected deployments and reducing reachability immediately. Mitigation focus: Identify all Natus Xltek NeuroWorks 8 installations and owners.; Check Natus guidance for fixed versions or vendor-approved mitigations.; Restrict network access to affected systems to trusted clinical management hosts..

Prepared

May 22, 2026, 06:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.