What’s Vulnerable › Vulnerabilities

CVE-2015-6463

• Severity: medium (CVSS 5.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-09-28 · updated 2026-06-17

Description

CodeWrights HART Comm DTM components, as used with Endress+Hauser FieldCare, allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a longtag XML schema containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected products

• Codewrights Hart Comm Dtm: all versions
• Endress+Hauser Hart Comm Dtm: all versions

References

• https://ics-cert.us-cert.gov/advisories/ICSA-15-267-01
• https://ics-cert.us-cert.gov/advisories/ICSA-15-267-01

Get alerted when CVE-2015-6463 or the next vulnerability affects your stack