CVE-2014-9206: Schneider Electric Device Type Manager

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Device Type Manager (DTM) 3.1.6 and earlier for Schneider Electric Invensys SRD Control Valve Positioner devices 960 and 991 allows local users to gain privileges via a malformed DLL file.

Affected products

• Schneider Electric Device Type Manager: up to and including 3.1.6

Published 2015-03-14. Last modified 2026-06-17.