Lucene search

[email protected]CVE-2020-8010

HistoryFeb 18, 2020 - 4:15 a.m.

CVE-2020-8010

2020-02-1804:15:14

[email protected]

web.nvd.nist.gov

127

cve-2020-8010

ca unified infrastructure management

nimsoft

uim

acl handling

vulnerability

robot component

remote code execution

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.071 Low

EPSS

Percentile

94.0%

JSON

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.

Affected configurations

NVD

Node

broadcomunified_infrastructure_managementRange≤9.20

broadcomunified_infrastructure_managementRange20.3.0–20.3.3

broadcomunified_infrastructure_managementMatch20.1

CPENameOperatorVersion
broadcom:unified_infrastructure_managementbroadcom unified infrastructure managementle9.20
broadcom:unified_infrastructure_managementbroadcom unified infrastructure managementle20.3.3
broadcom:unified_infrastructure_managementbroadcom unified infrastructure managementeq20.1

CPE	Name	Operator	Version
broadcom:unified_infrastructure_management	broadcom unified infrastructure management	le	9.20
broadcom:unified_infrastructure_management	broadcom unified infrastructure management	le	20.3.3
broadcom:unified_infrastructure_management	broadcom unified infrastructure management	eq	20.1

CNA Affected

[
  {
    "product": "CA Unified Infrastructure Management (Nimsoft/UIM)",
    "vendor": "CA Technologies - A Broadcom Company",
    "versions": [
      {
        "status": "affected",
        "version": "9.20 and below"
      }
    ]
  }
]

References

packetstormsecurity.com/files/158693/CA-Unified-Infrastructure-Management-Nimsoft-7.80-Buffer-Overflow.html

support.broadcom.com/external/content/security-advisories/CA20200205-01-Security-Notice-for-CA-Unified-Infrastructure-Management/7832

techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-for-ca-unified-infrastructure-management.html