CVE-2014-9203

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-02-07 · updated 2026-06-17
Weakness: CWE-119

Description

Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library, as used in MACTek Bullet DTM 1.00.0, GE Vector DTM 1.00.0, GE SVi1000 Positioner DTM 1.00.0, GE SVI II AP Positioner DTM 2.00.1, and GE 12400 Level Transmitter DTM 1.00.0, allows remote attackers to cause a denial of service (DTM outage) via crafted packets.

Affected products

GE 12400 Level Transmitter Device Type Manager: 1.00.0
GE Svi Ii Ap Positioner Device Type Manager: 2.00.1
GE Vector Device Type Manager: 1.00.0
Mactek Bullet Device Type Manager: 1.00.0

References

http://www.geoilandgas.com/securityadvisory
https://ics-cert.us-cert.gov/advisories/ICSA-15-036-01
http://www.geoilandgas.com/securityadvisory
https://ics-cert.us-cert.gov/advisories/ICSA-15-036-01

Get alerted when CVE-2014-9203 or the next vulnerability affects your stack