Vulnerability in Ca Technologies - A Broadcom Company Unified Infrastructure Management (Nimsoft/uim)
CVE-2020-8012
CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute arbitrary code.
EPSS: 0.841 (99.3th percentile) — read the EPSS interpretation.
Affected products
- Ca Technologies - A Broadcom Company Unified Infrastructure Management (Nimsoft/uim) — versions 9.20 and below
Public proof-of-concept exploits
References
- techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca2… (x_refsource_CONFIRM)
- packetstormsecurity.com/files/156577/Nimsoft-nimcontroller-7.80-Remote-Code-Exe… (x_refsource_MISC)
- packetstormsecurity.com/files/158693/CA-Unified-Infrastructure-Management-Nimso… (x_refsource_MISC)
- support.broadcom.com/external/content/security-advisories/CA20200205-01-Securit… (x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-8012?
- CVE-2020-8012 is a vulnerability in Ca Technologies - A Broadcom Company Unified Infrastructure Management (Nimsoft/uim). Published 2020-02-18.
- Is CVE-2020-8012 known to be exploited?
- 19 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.