NetSight
IP …
high7.8

CVE-2018-7239

A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could …

Impact

A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary code.

Affected products

VendorProductAffected versions
Schneider-ElectricAtv Lift Dtm
before 12.7.0
Schneider-ElectricAtv12 Dtm
before 12.7.0
Schneider-ElectricAtv212 Dtm
before 12.7.0
Schneider-ElectricAtv31 Dtm
before 12.7.0
Schneider-ElectricAtv312 Dtm
before 12.7.0
Schneider-ElectricAtv32 Dtm
before 12.7.0
Schneider-ElectricAtv320 Dtm
before 1.1.6
Schneider-ElectricAtv340 Dtm
before 1.2.3
Schneider-ElectricAtv600 Dtm
before 1.8.0
Schneider-ElectricAtv61 Dtm
before 12.7.0
Schneider-ElectricAtv71 Dtm
before 12.7.0
Schneider-ElectricAtv900 Dtm
before 1.3.5

Weakness classification

CWE-426

References