CVE-2023-47800: Natus NeuroWorks and SleepWorks before 8.4 GMA3 utilize a default password of xltek for the Microsoft SQL Server service sa account, allowing a threat actor to perform remote code execution, data e...

Summary

Natus NeuroWorks and SleepWorks before 8.4 GMA3 utilize a default password of xltek for the Microsoft SQL Server service sa account, allowing a threat actor to perform remote code execution, data exfiltration, or other nefarious actions such as tampering with data or destroying/disrupting MSSQL serv...

What to do

Update natus neuroworks_eeg to version 8.4 or later.
Update natus sleepworks to version 8.4 or later.

Affected software

Vendor	Product	Affected versions
natus	neuroworks_eeg	< 8.4 8.4 `cpe:2.3:a:natus:neuroworks_eeg::::::::`
natus	sleepworks	< 8.4 8.4 `cpe:2.3:a:natus:sleepworks::::::::`

Original advisory text

Natus NeuroWorks and SleepWorks before 8.4 GMA3 utilize a default password of xltek for the Microsoft SQL Server service sa account, allowing a threat actor to perform remote code execution, data e...

Natus NeuroWorks and SleepWorks before 8.4 GMA3 utilize a default password of xltek for the Microsoft SQL Server service sa account, allowing a threat actor to perform remote code execution, data exfiltration, or other nefarious actions such as tampering with data or destroying/disrupting MSSQL services.

References

https://partner.natus.com/m/7cd3bcca88e446d4/original/NeuroWorks-SleepWorks-Prod... Vendor Advisory
https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2023-006.txt Exploit Third Party Advisory