CVE-2018-7239

moderate-risk
Published 2018-03-09

A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary code.

Do I need to act?

-
0.46% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10 High
LOCAL / LOW complexity

Affected Products (13)

Atv Lift Dtm
Atv12 Dtm
Atv212 Dtm
Atv31 Dtm
Atv312 Dtm
Atv32 Dtm
Atv320 Dtm
Atv340 Dtm
Atv600 Dtm
Atv61 Dtm
Atv71 Dtm
Atv900 Dtm
Somove

Affected Vendors

Schneider-Electric

References (6)

Third Party Advisory http://www.securityfocus.com/bid/103338
Third Party Advisory https://ics-cert.us-cert.gov/advisories/ICSA-18-065-02
Vendor Advisory https://www.schneider-electric.com/en/download/document/SEVD-2018-060-01/
Third Party Advisory http://www.securityfocus.com/bid/103338
Third Party Advisory https://ics-cert.us-cert.gov/advisories/ICSA-18-065-02
Vendor Advisory https://www.schneider-electric.com/en/download/document/SEVD-2018-060-01/
43
/ 100
moderate-risk
Severity 24/34 · High
Exploitability 2/34 · Minimal
Exposure 17/34 · Moderate