High severity · published Mar 9, 2018
CVE-2018-7239
A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to…
7.8
CVSS
2.8%
EPSS
No
On KEV
Description
A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary code.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AL
Atv Lift Dtm · Schneider-electric
before 12.7.0 · source: NVD
AD
Atv12 Dtm · Schneider-electric
before 12.7.0 · source: NVD
AD
Atv212 Dtm · Schneider-electric
before 12.7.0 · source: NVD
AD
Atv31 Dtm · Schneider-electric
before 12.7.0 · source: NVD
AD
Atv312 Dtm · Schneider-electric
before 12.7.0 · source: NVD
AD
Atv32 Dtm · Schneider-electric
before 12.7.0 · source: NVD
AD
Atv320 Dtm · Schneider-electric
before 1.1.6 · source: NVD
AD
Atv340 Dtm · Schneider-electric
before 1.2.3 · source: NVD
AD
Atv600 Dtm · Schneider-electric
before 1.8.0 · source: NVD
AD
Atv61 Dtm · Schneider-electric
before 12.7.0 · source: NVD
AD
Atv71 Dtm · Schneider-electric
before 12.7.0 · source: NVD
AD
Atv900 Dtm · Schneider-electric
before 1.3.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-7239
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-7239
Third Party Advisory
http://www.securityfocus.com/bid/103338
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-065-02
Vendor Advisory
https://www.schneider-electric.com/en/download/document/SEVD-2018-060-01/