Vulnerability Details CVE-2013-2808
Heap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5 components, Xper Information Management Vascular Monitoring 5 components, and Xper Information Management servers and workstations for Flex Cardio products before XperConnect 1.5.4.053 SP2 allows remote attackers to execute arbitrary code via a crafted HTTP request to the Connect broker on TCP port 6000.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.085
EPSS Ranking 91.9%
CVSS Severity
CVSS v2 Score 9.3
References
Products affected by CVE-2013-2808
-
cpe:2.3:a:philips:xper_information_management_physiomonitoring_5:-
-
cpe:2.3:a:philips:xper_information_management_vascular_monitoring_5:-
-
cpe:2.3:a:philips:xperconnect:1.5.4.053
-
cpe:2.3:h:philips:xper_flex_cardio:-