CVE-2018-7239 A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2018-7239?
CVE-2018-7239 is a high-severity vulnerability in Schneider Electric SE SoMove, published on 9 Mar 2018.
Official description
A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary code.
Weakness: CWE-426
Which versions are affected by CVE-2018-7239?
It affects 13 products.
Products include Schneider-Electric Atv12 Dtm, Schneider-Electric Atv212 Dtm, Schneider-Electric Atv312 Dtm, Schneider-Electric Atv31 Dtm, Schneider-Electric Atv320 Dtm, Schneider-Electric Atv32 Dtm and 7 more.
How do I fix CVE-2018-7239?
No fix has been published for CVE-2018-7239 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-7239 being exploited?
There is no known exploitation of CVE-2018-7239 in the wild and no public exploit code.
Sources
Also known as GHSA-98p4-3pv5-4m4w.