EUVD-2020-29658

Malware in sbrugna...

Gurux GXDLMS Director Remote Execution Vulnerability

Gurux GXDLMS Director is an open source Windows program for interacting with meters by using the DLMS / COSEM protocol. A security vulnerability exists in Gurux GXDLMS Director prior to version 8.5.1905.1301, which stems from the program downloading over an unencrypted HTTP connection when updati...

Code injection

Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HTTP connection. A man-in-the-middle attacker can prompt the user to download updates by modifying the contents of gurux.fi/obis/files.xml and gurux.fi/updates/updates.xml. Then, the attack...

CVE-2020-8809

Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HTTP connection. A man-in-the-middle attacker can prompt the user to download updates by modifying the contents of gurux.fi/obis/files.xml and gurux.fi/updates/updates.xml. Then, the attack...