CVE-2020-8011

HIGH

CA Unified Infrastructure Management <20.3 - Buffer Overflow

Title source: llm

Description

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference vulnerability in the robot (controller) component. A remote attacker can crash the Controller service.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-for-ca-unified-infrastructure-management.html

Vendor Advisory x_refsource_misc

https://support.broadcom.com/external/content/security-advisories/CA20200205-01-Security-Notice-for-CA-Unified-Infrastructure-Management/7832

Scores

CVSS v3 7.5

EPSS 0.0125

EPSS Percentile 79.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-476

Status published

Products (2)

broadcom/unified_infrastructure_management 20.1

broadcom/unified_infrastructure_management < 9.20

Published Feb 18, 2020

Tracked Since Feb 18, 2026