CVE-2018-7239
A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary code.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - cybersecurity@se.com
- Published
- 2018-03-09
- Last modified
- 2024-09-16
- Weaknesses
- CWE-426
Affected products
- Atv12 Dtm (Schneider-electric)
- Atv212 Dtm (Schneider-electric)
- Atv312 Dtm (Schneider-electric)
- Atv31 Dtm (Schneider-electric)
- Atv320 Dtm (Schneider-electric)
- Atv32 Dtm (Schneider-electric)
- Atv340 Dtm (Schneider-electric)
- Atv600 Dtm (Schneider-electric)
- Atv61 Dtm (Schneider-electric)
- Atv71 Dtm (Schneider-electric)
- Atv900 Dtm (Schneider-electric)
- Atv Lift Dtm (Schneider-electric)
- Somove (Schneider-electric)
- Somove (Schneider Electric Se)
References
- http://www.securityfocus.com/bid/103338
- https://ics-cert.us-cert.gov/advisories/ICSA-18-065-02
- https://www.schneider-electric.com/en/download/document/SEVD-2018-060-01/
