PatchTheCVECVE-2020-8810: An issue was discovered in Gurux GXDLMS Director through 8.5.1905.1301
CVE-2020-8810 is a high-severity flaw (CVSS 8.1) affecting device language message specification director. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An issue was discovered in Gurux GXDLMS Director through 8.5.1905.1301. When downloading OBIS codes, it does not verify that the downloaded files are actual OBIS codes and doesn't check for path traversal. This allows the attacker exploiting CVE-2020-8809 to send executable files and place them in an autorun directory, or to place DLLs inside the existing GXDLMS Director installation (run on next execution of GXDLMS Director). This can be used to
Why this priority
- High severity
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 8.1 (High) |
| Attack vector | Network (remote) |
| Attack complexity | High |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 2.1% (top 18%) |
| CISA exploited list | No |
| Weakness | CWE-22 |
| Published | 2020-02-25 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2020-8810?
device language message specification director: upgrade to newer than 8.5.1905.1301. Exact commands for each OS are on this page.
Is CVE-2020-8810 being exploited?
CVE-2020-8810 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2020-8810 affect?
CVE-2020-8810 affects device language message specification director. Severity is high (CVSS 8.1). An issue was discovered in Gurux GXDLMS Director through 8.5.1905.1301. When downloading OBIS codes, it does not verify that the downloaded files are actual OBIS codes and doesn't check for path traversal. This allows the attacker exploitin
How urgent is CVE-2020-8810?
Priority 59/100. High severity; Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2020-8809 HIGH 8.1 UPGRADE Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HT