ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-7239

—
CVSS 3.0
7.8 high
EPSS
3%p86
Published
()
Modified
Description

A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary code.

Vendors
schneider-electric
Products
atv lift dtm, atv12 dtm, atv212 dtm, atv31 dtm, atv312 dtm, atv32 dtm, atv320 dtm, atv340 dtm, atv600 dtm, atv61 dtm, atv71 dtm, atv900 dtm
Weakness
CWE-426
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (2.8%)

In the news

No ingested article mentions this CVE yet.