9.3
CVSSv2

CVE-2013-2808

Published: 05/10/2013 Updated: 07/10/2013
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Heap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5 components, Xper Information Management Vascular Monitoring 5 components, and Xper Information Management servers and workstations for Flex Cardio products before XperConnect 1.5.4.053 SP2 allows remote malicious users to execute arbitrary code via a crafted HTTP request to the Connect broker on TCP port 6000.

Vulnerable Product Search on Vulmon Subscribe to Product

philips xper_information_management_physiomonitoring_5 -

philips xperconnect

philips xper_information_management_vascular_monitoring_5 -

philips xper_flex_cardio -