CVE-2014-9203: Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library

Routine

MEDIUM 5.0DOWNGRADEDOWNGRADEDOWNGRADE

CVE-2014-9203 is a medium-severity flaw (CVSS 5.0) affecting 12400 level transmitter device type manager, svi ii ap positioner device type manager, vector device type manager. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library, as used in MACTek Bullet DTM 1.00.0, GE Vector DTM 1.00.0, GE SVi1000 Positioner DTM 1.00.0, GE SVI II AP Positioner DTM 2.00.1, and GE 12400 Level Transmitter DTM 1.00.0, allows remote attackers to cause a denial of service (DTM outage) via crafted packets.

Why this priority

No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	5.0 (Medium)
EPSS exploit chance	1.8% (top 22%)
CISA exploited list	No
Weakness	CWE-119
Published	2015-02-07
Last modified	2026-06-17

Publisher (CNA): ICS-CERT · Vendor: ge · mactek

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2015-02-07 15:59 UTCPublished CVE record published
2026-06-17 00:17 UTCUpdated Record last modified

ge 12400 level transmitter device type manager DOWNGRADE

Affected: 1.00.0

Fixed in: no fixed release known

Safe to downgrade to: a release before 1.00.0

1. Check installed version

apt-cache policy 12400-level-transmitter-device-type-manager || rpm -q 12400-level-transmitter-device-type-manager || 12400-level-transmitter-device-type-manager --version

2. No fixed release: DOWNGRADE to a release before 1.00.0 (Debian / Ubuntu)

apt-cache madison 12400-level-transmitter-device-type-manager sudo apt install 12400-level-transmitter-device-type-manager=<VERSION_BEFORE_1.00.0> sudo apt-mark hold 12400-level-transmitter-device-type-manager

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list 12400-level-transmitter-device-type-manager sudo dnf downgrade 12400-level-transmitter-device-type-manager-<VERSION_BEFORE_1.00.0> sudo dnf versionlock add 12400-level-transmitter-device-type-manager

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

ge svi ii ap positioner device type manager DOWNGRADE

Affected: 2.00.1

Fixed in: no fixed release known

Safe to downgrade to: a release before 2.00.1

1. Check installed version

apt-cache policy svi-ii-ap-positioner-device-type-manager || rpm -q svi-ii-ap-positioner-device-type-manager || svi-ii-ap-positioner-device-type-manager --version

2. No fixed release: DOWNGRADE to a release before 2.00.1 (Debian / Ubuntu)

apt-cache madison svi-ii-ap-positioner-device-type-manager sudo apt install svi-ii-ap-positioner-device-type-manager=<VERSION_BEFORE_2.00.1> sudo apt-mark hold svi-ii-ap-positioner-device-type-manager

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list svi-ii-ap-positioner-device-type-manager sudo dnf downgrade svi-ii-ap-positioner-device-type-manager-<VERSION_BEFORE_2.00.1> sudo dnf versionlock add svi-ii-ap-positioner-device-type-manager

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

ge vector device type manager DOWNGRADE

Affected: 1.00.0

Fixed in: no fixed release known

Safe to downgrade to: a release before 1.00.0

1. Check installed version

apt-cache policy vector-device-type-manager || rpm -q vector-device-type-manager || vector-device-type-manager --version

2. No fixed release: DOWNGRADE to a release before 1.00.0 (Debian / Ubuntu)

apt-cache madison vector-device-type-manager sudo apt install vector-device-type-manager=<VERSION_BEFORE_1.00.0> sudo apt-mark hold vector-device-type-manager

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list vector-device-type-manager sudo dnf downgrade vector-device-type-manager-<VERSION_BEFORE_1.00.0> sudo dnf versionlock add vector-device-type-manager

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

mactek bullet device type manager DOWNGRADE

Affected: 1.00.0

Fixed in: no fixed release known

Safe to downgrade to: a release before 1.00.0

1. Check installed version

apt-cache policy bullet-device-type-manager || rpm -q bullet-device-type-manager || bullet-device-type-manager --version

2. No fixed release: DOWNGRADE to a release before 1.00.0 (Debian / Ubuntu)

apt-cache madison bullet-device-type-manager sudo apt install bullet-device-type-manager=<VERSION_BEFORE_1.00.0> sudo apt-mark hold bullet-device-type-manager

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list bullet-device-type-manager sudo dnf downgrade bullet-device-type-manager-<VERSION_BEFORE_1.00.0> sudo dnf versionlock add bullet-device-type-manager

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2014-9203?

12400 level transmitter device type manager: downgrade or apply the listed mitigation; svi ii ap positioner device type manager: downgrade or apply the listed mitigation; vector device type manager: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2014-9203 being exploited?

CVE-2014-9203 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2014-9203 affect?

CVE-2014-9203 affects 12400 level transmitter device type manager, svi ii ap positioner device type manager, vector device type manager. Severity is medium (CVSS 5.0). Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library, as used in MACTek Bullet DTM 1.00.0, GE Vector DTM 1.00.0, GE SVi1000 Positioner DTM 1.00.0, GE SVI II AP Positioner DTM 2.00.1,

How urgent is CVE-2014-9203?

Priority 37/100. No elevated risk signals yet.

References

← Back to latest CVEs