CVE:CVE-2018-7239
CNNVD:CNNVD-201803-274
Schneider Electric SoMove Software等都是法国施耐德电气（Schneider Electric）公司的产品。Schneider Electric SoMove Software是一套用于电机控制设备的安装软件。ATV320 DTM是一款设备类型管理器。
多款Schneider Electric产品中存在DLL劫持漏洞。攻击者可利用该漏洞执行任意代码。以下产品和版本受到影响：Schneider Electric SoMove Software 2.6.2之前的版本；ATV320 DTM 1.1.6之前版本；ATV340 DTM 1.2.3之前版本；ATV6xx DTM 1.8.0之前版本；ATV9xx DTM 1.3.5之前版本；ATV32 DTM 12.7.0之前版本；ATV71 DTM 12.7.0之前版本；ATV61 DTM 12.7.0之前版本；ATV LIFT DTM 12.7.0之前版本；ATV31/312 DTM 12.7.0之前版本；ATV212 DTM 12.7.0之前版本；ATV12 DTM 12.7.0之前版本。
solution:Upgrade schneider-electric atv_lift_dtm to a higher version than 12.7.0,and avoid the version (,12.7.0); Upgrade schneider-electric atv12_dtm to a higher version than 12.7.0,and avoid the version (,12.7.0); Upgrade schneider-electric atv212_dtm to a higher version than 12.7.0,and avoid the version (,12.7.0); Upgrade schneider-electric atv31_dtm to a higher version than 12.7.0,and avoid the version (,12.7.0); Upgrade schneider-electric atv312_dtm to a higher version than 12.7.0,and avoid the version (,12.7.0); Upgrade schneider-electric atv32_dtm to a higher version than 12.7.0,and avoid the version (,12.7.0); Upgrade schneider-electric atv320_dtm to a higher version than 1.1.6,and avoid the version (,1.1.6); Upgrade schneider-electric atv340_dtm to a higher version than 1.2.3,and avoid the version (,1.2.3); Upgrade schneider-electric atv600_dtm to a higher version than 1.8.0,and avoid the version (,1.8.0); Upgrade schneider-electric atv61_dtm to a higher version than 12.7.0,and avoid the version (,12.7.0); Upgrade schneider-electric atv71_dtm to a higher version than 12.7.0,and avoid the version (,12.7.0); Upgrade schneider-electric atv900_dtm to a higher version than 1.3.5,and avoid the version (,1.3.5); Upgrade schneider-electric somove to a higher version than 2.6.2,and avoid the version (,2.6.2)