CVE-2020-8010

Опубликовано: 18 фев. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Высокий

Описание

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.

Ссылки

http://packetstormsecurity.com/files/158693/CA-Unified-Infrastructure-Management-Nimsoft-7.80-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
https://support.broadcom.com/external/content/security-advisories/CA20200205-01-Security-Notice-for-CA-Unified-Infrastructure-Management/7832
Vendor Advisory
https://techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-for-ca-unified-infrastructure-management.html
Vendor Advisory
http://packetstormsecurity.com/files/158693/CA-Unified-Infrastructure-Management-Nimsoft-7.80-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
https://support.broadcom.com/external/content/security-advisories/CA20200205-01-Security-Notice-for-CA-Unified-Infrastructure-Management/7832
Vendor Advisory
https://techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-for-ca-unified-infrastructure-management.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:broadcom:unified_infrastructure_management:*:*:*:*:*:*:*:*

Версия до 9.20 (включая)

cpe:2.3:a:broadcom:unified_infrastructure_management:*:*:*:*:*:*:*:*

Версия от 20.3.0 (включая) до 20.3.3 (включая)

cpe:2.3:a:broadcom:unified_infrastructure_management:20.1:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.80938

Высокий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-g8q4-vx2r-28r6