CVE-2015-6463 - CVE House
Back to Database
Status published Medium CVE-2015-6463

CodeWrights HART Comm DTM components, as used with Endress+Hauser FieldCare,...

Vulnerability Description

CodeWrights HART Comm DTM components, as used with Endress+Hauser FieldCare, allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a longtag XML schema containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-6463

Credits & Attribution

No credits recorded in the NVD database.

References

More from codewrights

View All →
CVE-2014-9191
The CodeWrights HART Device Type Manager (DTM) library in Emerson...
Low 2.1

Affected Vendor

codewrights

View all reports →

Affected Software

hart comm dtm
Vulnerable Versions:
Unknown

Timeline

Official Publish: September 28th, 2015
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.