CVE-2020-8809

Gurux GXDLMS Director pre-8.5.1905.1301 downloads updates over HTTP. A MITM can modify gurux.fi/obis/files.xml and gurux.fi/updates/updates.xml, causing downloaded files to be altered. This can lead to code execution via add-ins, and via OBIS codes when combined with CVE-2020-8810. Connected sour...