CVE-2020-8011: Broadcom Unified Infrastructure Management

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference vulnerability in the robot (controller) component. A remote attacker can crash the Controller service.

Affected products

• Broadcom Unified Infrastructure Management: up to and including 9.20; from 20.3.0, before 20.4.0 (fixed in 20.4.0); version 20.1 only

Published 2020-02-18. Last modified 2026-06-17.