What’s Vulnerable › Vulnerabilities

CVE-2013-2808

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-10-05 · updated 2026-06-16
• Weakness: CWE-119

Description

Heap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5 components, Xper Information Management Vascular Monitoring 5 components, and Xper Information Management servers and workstations for Flex Cardio products before XperConnect 1.5.4.053 SP2 allows remote attackers to execute arbitrary code via a crafted HTTP request to the Connect broker on TCP port 6000.

Affected products

• Philips Xper Flex Cardio: all versions
• Philips Xper Information Management Physiomonitoring 5: all versions
• Philips Xper Information Management Vascular Monitoring 5: all versions
• Philips Xperconnect: through 1.5.4.053

References

• http://ics-cert.us-cert.gov/advisories/ICSA-13-277-01
• http://ics-cert.us-cert.gov/advisories/ICSA-13-277-01

Get alerted when CVE-2013-2808 or the next vulnerability affects your stack