CVE-2014-9203

MEDIUM 5.0CVE-2014-9203 · Published 07/02/2015 · updated 17/06/2026

In short

CVE-2014-9203 is a MEDIUM (CVSS 5.0) vulnerability affecting 12400 level transmitter device type manager (ge), svi ii ap positioner device type manager (ge), vector device type manager (ge).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
12400 level transmitter device type manager ge	`= 1.00.0`	No fix yet
svi ii ap positioner device type manager ge	`= 2.00.1`	No fix yet
vector device type manager ge	`= 1.00.0`	No fix yet
bullet device type manager mactek	`= 1.00.0`	No fix yet

Description

Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library, as used in MACTek Bullet DTM 1.00.0, GE Vector DTM 1.00.0, GE SVi1000 Positioner DTM 1.00.0, GE SVI II AP Positioner DTM 2.00.1, and GE 12400 Level Transmitter DTM 1.00.0, allows remote attackers to cause a denial of service (DTM outage) via crafted packets.

References

geoilandgas.com/securityadvisory · Vendor Advisory
ics-cert.us-cert.gov/advisories/ICSA-15-036-01 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free