Vulnerability Description
A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary code.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider-Electric | Atv Lift Dtm | < 12.7.0 |
| Schneider-Electric | Atv12 Dtm | < 12.7.0 |
| Schneider-Electric | Atv212 Dtm | < 12.7.0 |
| Schneider-Electric | Atv31 Dtm | < 12.7.0 |
| Schneider-Electric | Atv312 Dtm | < 12.7.0 |
| Schneider-Electric | Atv32 Dtm | < 12.7.0 |
| Schneider-Electric | Atv320 Dtm | < 1.1.6 |
| Schneider-Electric | Atv340 Dtm | < 1.2.3 |
| Schneider-Electric | Atv600 Dtm | < 1.8.0 |
| Schneider-Electric | Atv61 Dtm | < 12.7.0 |
| Schneider-Electric | Atv71 Dtm | < 12.7.0 |
| Schneider-Electric | Atv900 Dtm | < 1.3.5 |
| Schneider-Electric | Somove | < 2.6.2 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/103338Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-065-02Third Party AdvisoryUS Government Resource
- https://www.schneider-electric.com/en/download/document/SEVD-2018-060-01/Vendor Advisory
- http://www.securityfocus.com/bid/103338Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-065-02Third Party AdvisoryUS Government Resource
- https://www.schneider-electric.com/en/download/document/SEVD-2018-060-01/Vendor Advisory
FAQ
What is CVE-2018-7239?
CVE-2018-7239 is a vulnerability with a CVSS score of 7.8 (HIGH). A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary co...
How severe is CVE-2018-7239?
CVE-2018-7239 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-7239?
Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Atv Lift Dtm, Schneider-Electric Atv12 Dtm, Schneider-Electric Atv212 Dtm, Schneider-Electric Atv31 Dtm, Schneider-Electric Atv312 Dtm.