CVE-2014-9191 json
The CodeWrights HART Device Type Manager (DTM) library in Emerson HART DTM before 1.4.181 allows physically proximate attackers to cause a…
published 2015-01-10 11 y ago modified 2026-06-17 4 mo ago also EUVD-2014-9016
- cvss
- 2.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 31%
- public exploits
- 0
- none known
Summary
The CodeWrights HART Device Type Manager (DTM) library in Emerson HART DTM before 1.4.181 allows physically proximate attackers to cause a denial of service (DTM outage and FDT Frame application hang) by transmitting crafted response packets on the 4-20 mA current loop.
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
cisa ICSA-15-008-01A updated cvss 1.8
Emerson HART DTM Vulnerability
-
Emerson Process Management Fisher Controls DVC6000 Digital Valve Controller Rev._2.01 Emerson Process Management Fisher Controls International DVC2000 Digital Valve Controller Rev._1.01 Emerson Process Management Micro Motion 1500 5, 6 Emerson Process Management Micro Motion 1700 Rev._5 Emerson Process Management Micro Motion 1700 Analog 5, 6 Emerson Process Management Micro Motion 1700 IS Rev._6affected: mitigation “More details can be found at Emerson’s advisory located: (http://www2.emersonprocess.com/siteadmincenter/PM Central Web Documents/EMR EPM14001-1.pdf)”
+34 more productsfewer
Emerson Process Management Micro Motion 1700IS Rev._5 Emerson Process Management Micro Motion 2000 Config I/O Rev._5 Emerson Process Management Micro Motion 2200S Rev._1 Emerson Process Management Micro Motion 2400S Analog 2, 3, 4 Emerson Process Management Micro Motion 2500/2700 Config I/O 5, 6 Emerson Process Management Micro Motion 2700 Analog 5, 6 Emerson Process Management Micro Motion 2700 IS 5, 6 Emerson Process Management Micro Motion RFT9739 Rev._4 Emerson Process Management Micro Motion Series 3000 Rev._7 Emerson Process Management Rosemount 248 Temperature Transmitter Rev._2 Emerson Process Management Rosemount 333 Triloop Rev._1 Emerson Process Management Rosemount 644 Temperature Transmitter 6, 7, 8, 9 Emerson Process Management Rosemount 1151 Pressure Transmitter 5, 6 Emerson Process Management Rosemount 2051 Pressure Transmitter 3, 9, 10 Emerson Process Management Rosemount 2088 Pressure Transmitter 3, 9, 10 Emerson Process Management Rosemount 2090 Pressure Transmitter Rev._3 Emerson Process Management Rosemount 3051 Pressure Transmitter 3, 7, 9, 10 Emerson Process Management Rosemount 3051S Advanced Diagnostics 2, 3 Emerson Process Management Rosemount 3051S Electronic Remote Sensors Rev._1 Emerson Process Management Rosemount 3051S Pressure Transmitter Rev._7 Emerson Process Management Rosemount 3051SMV Direct Process Variable Rev._1 Emerson Process Management Rosemount 3051SMV MultiVariable Mass Energy Flow Rev._1 Emerson Process Management Rosemount 3095M MultiVariable Mass Flow Rev._2 Emerson Process Management Rosemount 3100 Ultrasonic Level Transmitter Rev._5 Emerson Process Management Rosemount 3144P Temperature Transmitter 3, 4, 5, 6 Emerson Process Management Rosemount 3300 Radar Level and Interface Transmitter Rev._3 Emerson Process Management Rosemount 4500 Pressure Transmitter Rev._7 Emerson Process Management Rosemount 4600 Pressure Transmitter Rev._1 Emerson Process Management Rosemount 5300 Radar Level and Interface Transmitter 1, 2, 3 Emerson Process Management Rosemount 5400 Radar Level Transmitter 1, 2 Emerson Process Management Rosemount 8712D Magnetic Flowmeter Rev._1 Emerson Process Management Rosemount 8712E Magnetic Flowmeter Rev._3 Emerson Process Management Rosemount 8712H Magnetic Flowmeter Rev._1 Emerson Process Management Rosemount 8732C Magnetic Flowmeter Rev._7
17 more affected in the full advisory
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
cisa ICSA-15-069-02 updated cvss 1.8
ABB HART Device DTM Vulnerability
-
ABB 800xA¾Device Management HART ABB Third-Party Device Type Library <=1.17 ABB Composer Field ABB Freelance 800F ABB Freelance ABB Third-Party HART DTMLibrary <=1.4.178.214 ABB S Plus Melody ABB Third-Party HART DTMLibrary <=1.4.175.185affected: mitigation “Using a virus scanner on all Windows-based system nodes, with the latest updates and with on‑access scanning enabled, can help prevent infection by malicious or unwanted software.”
+2 more productsfewer
ABB S+Engineering for Melody ABB Symphony Plus with Composer Melody
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
cisa ICSA-15-048-03 updated cvss 1.8
Yokogawa HART Device DTM Vulnerability
-
Yokogawa ADMAG AE Series Magnetic Flowmeters (AE/AE14) Rev.1, Rev.2 Yokogawa ADMAG AXF Series Magnetic Flowmeters (AXF/AXFA14) Rev.1 Yokogawa ADMAG AXR Two-wire Magnetic Flowmeters Rev.1, Rev.2 Yokogawa ADMAG SE Series Magnetic Flowmeters (SE/SE14) Rev.1, Rev.2 Yokogawa AM11 Magnetic Flowmeter Remote Converter Rev.1 Yokogawa AV550G Rev.1affected: mitigation “Yokogawa has released an advisory (YSAR-15-0001) to address this issue. It can be found at the following location: http://www.yokogawa.com/dcs/security/ysar/YSAR-15-0001E.pdf”
+24 more productsfewer
Yokogawa AXFA11 Magnetic Flowmeter Remote Converter Rev.1 Yokogawa Coriolis Mass Flowmeters- ROTAMASS 3-Series(RCCT3x/RCCF31) Rev.1, Rev.2, Rev.3 Yokogawa Coriolis Mass Flowmeters(CF11) Rev.1 Yokogawa Differential Pressure Transmitters Rev.1 Yokogawa digitalYEWFLO Vortex Flowmeter Rev.1, Rev.2, Rev.3, Rev.4 Yokogawa DO202 Rev.1 Yokogawa Dpharp EJA /EJA-A Series Pressure Transmitters/Differential PressureTransmitters Rev.1, Rev.2, Rev.3 Yokogawa Dpharp EJX Series Pressure Transmitters/Differential PressureTransmitters Rev.1, Rev.2, Rev.3 Yokogawa EJX Multivariable Transmitters（EJX910A/EJX930A) Rev.1, Rev.2 Yokogawa ISC202 Rev.1 Yokogawa ISC450 Rev.1, Rev.2 Yokogawa PH150 Rev.1, Rev.2 Yokogawa PH202 Rev.1 Yokogawa PH450 Rev.1, Rev.2 Yokogawa Rotameter Rev.1 Yokogawa SC150 Rev.1, Rev.2 Yokogawa SC202 Rev.1 Yokogawa SC450 Rev.1, Rev.2 Yokogawa YEWFLO Vortex Flowmeter Rev.1, Rev.2 Yokogawa YT200 Temperature Transmitters Rev.1 Yokogawa YTA70 Temperature Transmitters Rev.1 Yokogawa YTA110/YTA310/YTA320 Temperature Transmitters Rev.1, Rev.2, Rev.3 Yokogawa ZR202 Rev.1 Yokogawa ZR402 Rev.1
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
cisa ICSA-15-036-02 updated cvss 1.8
Pepperl+Fuchs Hart Device DTM Vulnerability
-
PEPPERL+FUCHS DTM Collection CorrTran DTM <=1.4.128.8 PEPPERL+FUCHS DTM Collection Level Control DTM <=1.0.28affected: mitigation “PEPPERL+FUCHS has updated the software library for the DTM Collection Level Control DTM impacted. The updated software Version 1.0.29 is available at: http://www.pepperl-fuchs.com”
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
cisa ICSA-15-029-01 updated cvss 1.8
Honeywell HART DTM Vulnerability
-
Honeywell ST 3000 H6 Transmitter with Advanced Diagnostics Rev._1 Honeywell ST 3000 HART 5 Transmitter Rev._1 Honeywell ST 3000 HART 6 Transmitter Rev._1 Honeywell ST STT25H HART 5 Transmitter Rev._1 Honeywell ST STT25S HART 6 Transmitter Rev._1 Honeywell STT25H HART 5 Transmitter 1, 3affected: mitigation
+2 more productsfewer
Honeywell STT25S HART 5 Transmitter Rev._2 Honeywell STT25T HART 5 Transmitter 1, 2
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
cisa ICSA-15-027-01 updated cvss 1.8
Magnetrol HART DTM Vulnerability
-
Magnetrol Echotel Model 355 Ultrasonic transmitter Firmware__1.x Magnetrol Eclipse Model 705 Guided Wave Radar transmitter Firmware__3.x Magnetrol Model R82 Pulse Burst Radar Transmitter 1.x, 2.x Magnetrol Thermatel Model TA2 Thermal Mass Flowmeter Firmware__2.xaffected: mitigation “Magnetrol has updated the software library impacted. The update can be downloaded here: http://us.magnetrol.com/Product_Catalog.aspx?Id=5”
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
cisa ICSA-15-012-01C updated cvss 1.8
CodeWrights GmbH HART Device DTM Vulnerability (Update C)
-
Codewrights DTMStudio <1.5.151affected: mitigation “CodeWrights GmbH has developed an updated library to address this vulnerability. These libraries are being provided to its customers (vendors) with current support agreements.”
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
cisa ICSA-15-012-01B updated cvss 1.8
CodeWrights GmbH HART DTM Vulnerability (Update B)
-
Codewrights DTMStudio <1.5.151affected: mitigation “CodeWrights GmbH has developed an updated library to address this vulnerability. These libraries are being provided to its customers (vendors) with current support agreements.”
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
cisa ICSA-15-012-01A updated cvss 1.8
CodeWrights GmbH HART DTM Vulnerability (Update A)
-
Codewrights DTMStudio <1.5.151affected: mitigation “CodeWrights GmbH has developed an updated library to address this vulnerability. These libraries are being provided to its customers (vendors) with current support agreements.”
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
cisa ICSA-15-012-01 updated cvss 1.8
CodeWrights GmbH HART DTM Vulnerability
-
Codewrights DTMStudio <1.5.151affected: mitigation “CodeWrights GmbH has developed an updated library to address this vulnerability. These libraries are being provided to its customers (vendors) with current support agreements.”
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
cisa ICSA-15-237-01 updated cvss 1.8
Endress+Hauser HART Device DTM Vulnerability
-
Endress+Hauser Cerabar M / PMx 4x >=V1.0, <=1.2 Endress+Hauser Cerabar M 5x / PMx 5x V1.00.xx Endress+Hauser Cerabar S / PMx 7x V01.00, V02.00, V02.10.xx Endress+Hauser Cerabar S / PMx 7x / HART FW_2.20.zz_/_Dev.Rev._22 Endress+Hauser Cerabar S / PMx x3x V1.x, V2.x, V3.x, V5.0 Endress+Hauser Deltabar / FMD 7x / HART FW_1.00.zz_/_Dev.Rev._1affected: mitigation “Endress+Hauser has released a security update addressing the HART Device DTMs. The update can be downloaded here: (https://portal.endress.com/webdownload/FieldCareDownloadGui/)” portal.endress.com
+34 more productsfewer
Endress+Hauser Deltabar M 5x / PMD 55 V1.00.xx Endress+Hauser Deltabar S / xMD 7x V01.00, V02.00, V02.10.xx Endress+Hauser Deltabar S / xMD 7x / HART FW_2.20.zz_/_Dev.Rev._22 Endress+Hauser Deltabar S / xMD x3x V1.x, V2.x, V5.0, V7.1 Endress+Hauser Deltapilot M 5x / FMB 5x V1.00.xx Endress+Hauser Deltapilot S / DB 5x V1.x, V2.0 Endress+Hauser Deltapilot S / FMB 70 V02.10.xx Endress+Hauser Deltapilot S / FMB 70 / HART FW_2.20.zz_/_Dev.Rev._22 Endress+Hauser Gammapilot M / FMG 60 V01.xx, V02.xx Endress+Hauser Gammapilot M / FMG 60 / HART FW_1.04.zz_/_Dev.Rev._3 Endress+Hauser iTemp / TMT 122 V1.1 Endress+Hauser iTemp / TMT 142 V1.03.00 Endress+Hauser iTemp / TMT 162 >=V1.00.00, <=1.02.00, V1.03.00 Endress+Hauser iTemp / TMT 182 V1.1 Endress+Hauser iTEMP / TMT82 / HART FW_1.00.zz_/_Dev.Rev._1 Endress+Hauser Levelflex / FMP 2xx >=V2.0, <=2.1 Endress+Hauser Levelflex M / FMP 4x V4.xx Endress+Hauser Levelflex M / FMP 40 V2.00 Endress+Hauser Levelflex M Int / FMP 4x I V1.08 Endress+Hauser Liquicap M / FMI 5x 1.00.xx, 1.03.xx Endress+Hauser Liquiline Cond / CM 42 / HART FW_2.01.zz_/_Dev.Rev._1 Endress+Hauser Liquiline M / CM44x FW_1.02.zz_/_Dev.Rev._1 Endress+Hauser Liquiline M Cci / CM 42 V13.01.xx, V13.04.07, V13.05.xx Endress+Hauser Liquiline M Cci / CM 42 / HART FW_13.06.zz_/_Dev.Rev._10, FW_13.07.zz_/_Dev.Rev._11 Endress+Hauser Liquiline M DO / CM 42 V20.02.07, V20.02.xx, V20.03.xx Endress+Hauser Liquiline M DO / CM 42 / HART FW_20.04.zz_/_Dev.Rev._17, FW_20.05.zz_/_Dev.Rev._18 Endress+Hauser Liquiline M pH-ORP / CM 42 V10.02.xx, V10.04.07, V10.04.xx, V10.05.xx Endress+Hauser Liquiline M pH-ORP / CM 42 / HART FW_10.06.zz_/_Dev.Rev._0D, FW_10.07.zz_/_Dev.Rev._0E Endress+Hauser Liquiline Oxygen / CM 42 / HART FW_2.01.zz_/_Dev.Rev._1 Endress+Hauser Liquiline pHORP / CM 42 / HART FW_2.01.zz_/_Dev.Rev._1 Endress+Hauser Liquiport / CSPxx / HART FW_01.02.zz_/_Dev.Rev.1 Endress+Hauser Liquistation / CSFxx / HART FW_01.02.zz_/_Dev.Rev.1 Endress+Hauser Liquisys M Chlorine / CCM 2x3 V2.30, V2.35 Endress+Hauser Liquisys M Cond. C / CLM 2x3 V2.30
72 more affected in the full advisory
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
Exploit prediction
0.38% chance of exploitation in the next 30 days, higher than 31% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:N/I:N/A:P |
Classification
- Weakness
-
- CWE-399 Resource Management Errors
References
-
www2.emersonprocess.com
/siteadmincenter/PM%20Central%20Web%20Documents/EMR%20EPM14001-1.pdf
vendor-advisory
-
ics-cert.us-cert.gov
/advisories/ICSA-15-008-01A
third-party-advisory, us-government-resource
-
securityfocus.com
/bid/71952
vdb-entry
- ics-cert.us-cert.gov /advisories/ICSA-15-237-01
Sources
- CVE List CVE-2014-9191
- NVD CVE-2014-9191
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.