CVE-2020-8010

CRITICAL

CA Unified Infrastructure Management Nimsoft 7.80 - Remote Buffer Overflow

Title source: metasploit

Description

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.

Exploits (1)

metasploit WORKING POC EXCELLENT

by wetw0rk · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/nimsoft/nimcontroller_bof.rb

View Code ZIP pw:eip

References (3)

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/158693/CA-Unified-Infrastructure-Management-Nimsoft-7.80-Buffer-Overflow.html

[Vendor Advisory] https://support.broadcom.com/external/content/security-advisories/CA20200205-01-Security-Notice-for-CA-Unified-Infrastructure-Management/7832

[Vendor Advisory] https://techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-for-ca-unified-infrastructure-management.html

Scores

CVSS v3 9.8

EPSS 0.8094

EPSS Percentile 99.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Status published

Products (2)

broadcom/unified_infrastructure_management 20.1

broadcom/unified_infrastructure_management < 9.20

Published Feb 18, 2020

Tracked Since Feb 18, 2026