CVEvulnerability

CVE-2018-7239

7.8 HIGH Published 2018-03-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-03-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-426

Description

A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary code.

Affected configurations

• schneider-electric atv lift dtm (< 12.7.0) • schneider-electric atv12 dtm (< 12.7.0) • schneider-electric atv212 dtm (< 12.7.0) • schneider-electric atv31 dtm (< 12.7.0) • schneider-electric atv312 dtm (< 12.7.0) • schneider-electric atv32 dtm (< 12.7.0) • schneider-electric atv320 dtm (< 1.1.6) • schneider-electric atv340 dtm (< 1.2.3) • schneider-electric atv600 dtm (< 1.8.0) • schneider-electric atv61 dtm (< 12.7.0) • schneider-electric atv71 dtm (< 12.7.0) • schneider-electric atv900 dtm (< 1.3.5) • schneider-electric somove (< 2.6.2)

Related

Weakness · CWE (1)

  • CWE-426 Untrusted Search Path weakness

References