A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary code.
Existe una vulnerabilidad de secuestro de DLL en SoMove Software de Schneider Electric y en los componentes de software DTM asociados, en todas las versiones anteriores a la 2.6.2. Esto podría permitir que un atacante ejecute código arbitrario.
AV:N/AC:M/Au:N/C:P/I:P/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | MEDIUM |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-426
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | atv_lift_dtm | * | <built-in method update of dict object at 0x7e60eb225440> | Application |
| schneider-electric | atv12_dtm | * | <built-in method update of dict object at 0x7e6107f3a840> | Application |
| schneider-electric | atv212_dtm | * | <built-in method update of dict object at 0x7e61109d49c0> | Application |
| schneider-electric | atv31_dtm | * | <built-in method update of dict object at 0x7e6134108340> | Application |
| schneider-electric | atv312_dtm | * | <built-in method update of dict object at 0x7e60eb224a40> | Application |
| schneider-electric | atv32_dtm | * | <built-in method update of dict object at 0x7e60eb225540> | Application |
| schneider-electric | atv320_dtm | * | <built-in method update of dict object at 0x7e6107f3ba40> | Application |
| schneider-electric | atv340_dtm | * | <built-in method update of dict object at 0x7e60e832cd00> | Application |
| schneider-electric | atv600_dtm | * | <built-in method update of dict object at 0x7e6107f3bc00> | Application |
| schneider-electric | atv61_dtm | * | <built-in method update of dict object at 0x7e60eb224780> | Application |
| schneider-electric | atv71_dtm | * | <built-in method update of dict object at 0x7e61109d6a80> | Application |
| schneider-electric | atv900_dtm | * | <built-in method update of dict object at 0x7e6107f3ad80> | Application |
| schneider-electric | somove | * | <built-in method update of dict object at 0x7e6107f3bf80> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:schneider-electric:atv_lift_dtm:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:atv12_dtm:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:atv212_dtm:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:atv31_dtm:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:atv312_dtm:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:atv32_dtm:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:atv320_dtm:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:atv340_dtm:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:atv600_dtm:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:atv61_dtm:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:atv71_dtm:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:atv900_dtm:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:somove:*:*:*:*:*:*:*:* |