CVE-2013-2808: Philips Xper Flex Cardio

High severity, CVSS 9.3. EPSS: 4.3% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5 components, Xper Information Management Vascular Monitoring 5 components, and Xper Information Management servers and workstations for Flex Cardio products before XperConnect 1.5.4.053 SP2 allows remote attackers to execute arbitrary code via a crafted HTTP request to the Connect broker on TCP port 6000.

Affected products

• Philips Xper Flex Cardio
• Philips Xper Information Management Physiomonitoring 5: affected versions not specified
• Philips Xper Information Management Vascular Monitoring 5: affected versions not specified
• Philips Xperconnect: up to and including 1.5.4.053

Published 2013-10-05. Last modified 2026-06-16.