CVE-2020-8012
CRITICALBroadcom Unified Infrastructure Management < 9.20 - Remote Code Execution via Buffer Overflow in Robot Component
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2020-8012.
PoCs published by wetw0rk, including Metasploit module exploits/windows/nimsoft/nimcontroller_bof.
AI-analyzed exploit summary This exploit targets a remote buffer overflow in CA Unified Infrastructure Management Nimsoft 7.80, bypassing stack protections to achieve RCE via a crafted payload. It includes a Meterpreter reverse shell and a ROP chain for x64 Windows systems.
Description
CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute arbitrary code.
Exploits (3)
This exploit targets a remote buffer overflow in CA Unified Infrastructure Management Nimsoft 7.80, bypassing stack protections to achieve RCE via a crafted payload. It includes a Meterpreter reverse shell and a ROP chain for x64 Windows systems.
This repository contains functional exploit code for CVE-2016-10709, targeting the HackSys Extreme Vulnerable Driver (HEVD) with a stack overflow vulnerability. The exploit includes shellcode for token stealing and privilege escalation on Windows 10 x64 systems.
This Metasploit module exploits a buffer overflow in CA Unified Infrastructure Management Nimsoft 7.80 via a crafted directory_list probe, leveraging ROP chains to bypass DEP and achieve remote code execution.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H