CVE-2018-7239: Schneider Electric ATV12 Dtm

High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days.

A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary code.

Affected products

• Schneider Electric ATV12 Dtm: before 12.7.0 (fixed in 12.7.0)
• Schneider Electric ATV212 Dtm: before 12.7.0 (fixed in 12.7.0)
• Schneider Electric ATV312 Dtm: before 12.7.0 (fixed in 12.7.0)
• Schneider Electric ATV31 Dtm: before 12.7.0 (fixed in 12.7.0)
• Schneider Electric ATV320 Dtm: before 1.1.6 (fixed in 1.1.6)
• Schneider Electric ATV32 Dtm: before 12.7.0 (fixed in 12.7.0)
• Schneider Electric ATV340 Dtm: before 1.2.3 (fixed in 1.2.3)
• Schneider Electric ATV600 Dtm: before 1.8.0 (fixed in 1.8.0)
• Schneider Electric ATV61 Dtm: before 12.7.0 (fixed in 12.7.0)
• Schneider Electric ATV71 Dtm: before 12.7.0 (fixed in 12.7.0)
• Schneider Electric ATV900 Dtm: before 1.3.5 (fixed in 1.3.5)
• Schneider Electric Atv Lift Dtm: before 12.7.0 (fixed in 12.7.0)
• Schneider Electric Somove: before 2.6.2 (fixed in 2.6.2)

Published 2018-03-09. Last modified 2026-06-17.