CVE-2018-7239

published 2018-03-09

CVE-2018-7239: A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could…

Priority P3 40 high 7.8 CVSS 3.0

AV L AC L PR N UI R S U C H I H A H

A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary code.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	atv12_dtm	< 12.7.0	12.7.0
schneider-electric	atv212_dtm	< 12.7.0	12.7.0
schneider-electric	atv312_dtm	< 12.7.0	12.7.0
schneider-electric	atv31_dtm	< 12.7.0	12.7.0
schneider-electric	atv320_dtm	< 1.1.6	1.1.6
schneider-electric	atv32_dtm	< 12.7.0	12.7.0
schneider-electric	atv340_dtm	< 1.2.3	1.2.3
schneider-electric	atv600_dtm	< 1.8.0	1.8.0
schneider-electric	atv61_dtm	< 12.7.0	12.7.0
schneider-electric	atv71_dtm	< 12.7.0	12.7.0
schneider-electric	atv900_dtm	< 1.3.5	1.3.5
schneider-electric	atv_lift_dtm	< 12.7.0	12.7.0
schneider-electric	somove	< 2.6.2	2.6.2
schneider_electric_se	somove	—	—

CVSS provenance

nvd v3.0 7.8 HIGH CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvd v2.0 6.8 MEDIUM AV:N/AC:M/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-426