CVEvulnerability

CVE-2013-2808

9.3 HIGH Published 2013-10-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-10-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Heap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5 components, Xper Information Management Vascular Monitoring 5 components, and Xper Information Management servers and workstations for Flex Cardio products before XperConnect 1.5.4.053 SP2 allows remote attackers to execute arbitrary code via a crafted HTTP request to the Connect broker on TCP port 6000.

Affected configurations

• philips xper information management physiomonitoring 5 • philips xperconnect (<= 1.5.4.053) • philips xper information management vascular monitoring 5 • philips xper flex cardio

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References