CVE-2020-8010

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.

• http://packetstormsecurity.com/files/158693/CA-Unified-Infrastructure-Management-Nimsoft-7.80-Buffer-Overflow.htmlExploit, Third Party Advisory, VDB Entry
• https://support.broadcom.com/external/content/security-advisories/CA20200205-01-Security-Notice-for-CA-Unified-Infrastructure-Management/7832Vendor Advisory
• https://techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-for-ca-unified-infrastructure-management.htmlVendor Advisory
• http://packetstormsecurity.com/files/158693/CA-Unified-Infrastructure-Management-Nimsoft-7.80-Buffer-Overflow.htmlExploit, Third Party Advisory, VDB Entry
• https://support.broadcom.com/external/content/security-advisories/CA20200205-01-Security-Notice-for-CA-Unified-Infrastructure-Management/7832Vendor Advisory
• https://techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-for-ca-unified-infrastructure-management.htmlVendor Advisory

Published

Feb 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-8002A NULL pointer dereference in vrend_renderer.c in virglrende…5.5
• CVE-2020-8003A double-free vulnerability in vrend_renderer.c in virglrend…5.5
• CVE-2020-8004STMicroelectronics STM32F1 devices have Incorrect Access Con…7.5
• CVE-2020-8006The server in Circontrol Raption through 5.11.2 has a pre-au…8.8
• CVE-2020-8007The pwrstudio web application of EV Charger (in the server i…9.8
• CVE-2020-8009AVB MOTU devices through 2020-01-22 allow /.. Directory Trav…7.5
• CVE-2020-8011CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.…7.5
• CVE-2020-8012CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.…9.8
• CVE-2020-8013A UNIX Symbolic Link (Symlink) Following vulnerability in ch…2.5
• CVE-2020-8014A UNIX Symbolic Link (Symlink) Following vulnerability in th…7.8
• CVE-2020-8015A UNIX Symbolic Link (Symlink) Following vulnerability in th…7.8
• CVE-2020-8016A Race Condition Enabling Link Following vulnerability in th…7