High severity · published Feb 25, 2020
CVE-2020-8810
An issue was discovered in Gurux GXDLMS Director through 8.5.1905.1301
8.1
CVSS
2.1%
EPSS
No
On KEV
Description
An issue was discovered in Gurux GXDLMS Director through 8.5.1905.1301. When downloading OBIS codes, it does not verify that the downloaded files are actual OBIS codes and doesn't check for path traversal. This allows the attacker exploiting CVE-2020-8809 to send executable files and place them in an autorun directory, or to place DLLs inside the existing GXDLMS Director installation (run on next execution of GXDLMS Director). This can be used to achieve code execution even if the user doesn't have any add-ins installed.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Device Language Message Specification Director · Gurux
through 8.5.1905.1301 · source: NVD
Affected product
DL
Device Language Message Specification Director
Gurux
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-8810
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-8810
Exploit
https://github.com/seqred-s-a/gxdlmsdirector-cve
Third Party Advisory
https://seqred.pl/en/cve-gurux-gxdlms-director/
More from Device Language Message Specification Director
8.1
CVE-2020-8809
Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HTTP connection