cnvd - cnvd-2015-00995

CNVD-2015-00995

Vulnerability from cnvd - Published: 2015-02-10

Title

General Electric (GE) 及MACTek 'HART DTM' Library存在拒绝服务漏洞

Description

General Electric Company是电气设备，电器和电子设备制造公司。 General Electric (GE)及MACTek 'HART DTM' Library存在拒绝服务漏洞，攻击者可以利用此问题使受影响的系统停止响应，从而发起拒绝服务攻击。

Severity

中

Patch Name

General Electric (GE) 及MACTek 'HART DTM' Library存在拒绝服务漏洞的补丁

Patch Description

General Electric Company是电气设备，电器和电子设备制造公司。 General Electric (GE)及MACTek 'HART DTM' Library存在拒绝服务漏洞，攻击者可以利用此问题使受影响的系统停止响应，从而发起拒绝服务攻击。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

用户可以联系供应商获得补丁信息： http://www.gedigitalenergy.com/

Reference

http://www.securityfocus.com/bid/72524

Impacted products

Name
General Electric MACTek Bullet DTM 1.00.0

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "72524"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2014-9203"
    }
  },
  "description": "General Electric Company\u662f\u7535\u6c14\u8bbe\u5907\uff0c\u7535\u5668\u548c\u7535\u5b50\u8bbe\u5907\u5236\u9020\u516c\u53f8\u3002 \r\n\r\nGeneral Electric (GE)\u53caMACTek \u0027HART DTM\u0027 Library\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6b64\u95ee\u9898\u4f7f\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u505c\u6b62\u54cd\u5e94\uff0c\u4ece\u800c\u53d1\u8d77\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002",
  "discovererName": "Alexander Bolshev",
  "formalWay": "\u7528\u6237\u53ef\u4ee5\u8054\u7cfb\u4f9b\u5e94\u5546\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttp://www.gedigitalenergy.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-00995",
  "openTime": "2015-02-10",
  "patchDescription": "General Electric Company\u662f\u7535\u6c14\u8bbe\u5907\uff0c\u7535\u5668\u548c\u7535\u5b50\u8bbe\u5907\u5236\u9020\u516c\u53f8\u3002 \r\n\r\nGeneral Electric (GE)\u53caMACTek \u0027HART DTM\u0027 Library\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6b64\u95ee\u9898\u4f7f\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u505c\u6b62\u54cd\u5e94\uff0c\u4ece\u800c\u53d1\u8d77\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "General Electric (GE) \u53caMACTek \u0027HART DTM\u0027 Library\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "General Electric MACTek Bullet DTM 1.00.0"
  },
  "referenceLink": "http://www.securityfocus.com/bid/72524",
  "serverity": "\u4e2d",
  "submitTime": "2015-02-09",
  "title": "General Electric (GE) \u53caMACTek \u0027HART DTM\u0027 Library\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

CVE-2014-9203 (GCVE-0-2014-9203)

Vulnerability from cvelistv5 – Published: 2015-02-07 15:00 – Updated: 2024-08-06 13:40

Summary

Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library, as used in MACTek Bullet DTM 1.00.0, GE Vector DTM 1.00.0, GE SVi1000 Positioner DTM 1.00.0, GE SVI II AP Positioner DTM 2.00.1, and GE 12400 Level Transmitter DTM 1.00.0, allows remote attackers to cause a denial of service (DTM outage) via crafted packets.

Severity ?

No CVSS data available.

CWE

Assigner

icscert

References

URL

Tags

	http://www.geoilandgas.com/securityadvisory	x_refsource_CONFIRM
	https://ics-cert.us-cert.gov/advisories/ICSA-15-036-01	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:40:24.552Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.geoilandgas.com/securityadvisory"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-036-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-02-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library, as used in MACTek Bullet DTM 1.00.0, GE Vector DTM 1.00.0, GE SVi1000 Positioner DTM 1.00.0, GE SVI II AP Positioner DTM 2.00.1, and GE 12400 Level Transmitter DTM 1.00.0, allows remote attackers to cause a denial of service (DTM outage) via crafted packets."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-02-07T15:57:00",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.geoilandgas.com/securityadvisory"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-036-01"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "ID": "CVE-2014-9203",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library, as used in MACTek Bullet DTM 1.00.0, GE Vector DTM 1.00.0, GE SVi1000 Positioner DTM 1.00.0, GE SVI II AP Positioner DTM 2.00.1, and GE 12400 Level Transmitter DTM 1.00.0, allows remote attackers to cause a denial of service (DTM outage) via crafted packets."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.geoilandgas.com/securityadvisory",
              "refsource": "CONFIRM",
              "url": "http://www.geoilandgas.com/securityadvisory"
            },
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-15-036-01",
              "refsource": "MISC",
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-036-01"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2014-9203",
    "datePublished": "2015-02-07T15:00:00",
    "dateReserved": "2014-12-02T00:00:00",
    "dateUpdated": "2024-08-06T13:40:24.552Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2015-00995

CVE-2014-9203 (GCVE-0-2014-9203)

Tags

Sightings

Nomenclature