Vulnerability Spotlight: Natus Neuro Works Multiple Vulnerabilities
Summary: Cisco Talos published five vulnerabilities in Natus NeuroWorks software in April 2018 and identified three additional ones, all affecting the Natus Xltek EEG medical products that connect to networks via ethernet. The flaws can crash the affected service and can be triggered remotely without authentication, and Natus released NeuroWorks 8.5 GMA3 to address them.
Why it matters: These are remotely triggerable, unauthenticated denial-of-service flaws in devices used for EEG data acquisition, so an attacker who can reach the network can take the service down without any credentials.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2017-2853CVE-2017-2858CVE-2017-2860
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026