CVE-2020-8010: Broadcom Unified Infrastructure Management

Critical severity, CVSS 9.8. EPSS: 50.7% chance of exploitation in the next 30 days.

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.

Affected products

  • Broadcom Unified Infrastructure Management: up to and including 9.20; from 20.3.0, up to and including 20.3.3; version 20.1 only

Published 2020-02-18. Last modified 2026-06-17.