What’s Vulnerable › Vulnerabilities

CVE-2014-9191

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-01-10 · updated 2026-06-17
• Weakness: CWE-399

Description

The CodeWrights HART Device Type Manager (DTM) library in Emerson HART DTM before 1.4.181 allows physically proximate attackers to cause a denial of service (DTM outage and FDT Frame application hang) by transmitting crafted response packets on the 4-20 mA current loop.

Affected products

• Codewrights Hart Device Type Manager: through 1.0.44

References

• http://www.securityfocus.com/bid/71952
• http://www2.emersonprocess.com/siteadmincenter/PM%20Central%20Web%20Documents/EMR%20EPM14001-1.pdf
• https://ics-cert.us-cert.gov/advisories/ICSA-15-008-01A
• https://ics-cert.us-cert.gov/advisories/ICSA-15-237-01
• http://www.securityfocus.com/bid/71952
• http://www2.emersonprocess.com/siteadmincenter/PM%20Central%20Web%20Documents/EMR%20EPM14001-1.pdf
• https://ics-cert.us-cert.gov/advisories/ICSA-15-008-01A
• https://ics-cert.us-cert.gov/advisories/ICSA-15-237-01

Get alerted when CVE-2014-9191 or the next vulnerability affects your stack