critical9.3
CVE-2013-2808
Heap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5 components, Xper Information Management Vascular Monitoring 5 comp…
Impact
Heap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5 components, Xper Information Management Vascular Monitoring 5 components, and Xper Information Management servers and workstations for Flex Cardio products before XperConnect 1.5.4.053 SP2 allows remote attackers to execute arbitrary code via a crafted HTTP request to the Connect broker on TCP port 6000.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Philips | Xper Information Management Physiomonitoring 5 | All versions |
| Philips | Xperconnect | through 1.5.4.053 |
| Philips | Xper Information Management Vascular Monitoring 5 | All versions |
| Philips | Xper Flex Cardio | All versions |