Vulnerability in Ca Technologies - A Broadcom Company Unified Infrastructure Management (Nimsoft/uim)
CVE-2020-8010
CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the tar…
EPSS: 0.809 (99.2th percentile) — read the EPSS interpretation.
Affected products
- Ca Technologies - A Broadcom Company Unified Infrastructure Management (Nimsoft/uim) — versions 9.20 and below
Public proof-of-concept exploits
References
- techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca2… (x_refsource_CONFIRM)
- packetstormsecurity.com/files/158693/CA-Unified-Infrastructure-Management-Nimso… (x_refsource_MISC)
- support.broadcom.com/external/content/security-advisories/CA20200205-01-Securit… (x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-8010?
- CVE-2020-8010 is a vulnerability in Ca Technologies - A Broadcom Company Unified Infrastructure Management (Nimsoft/uim). Published 2020-02-18.
- Is CVE-2020-8010 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.