CRITICAL

CVE-2020-8010

CVSS v3

9.8

CRITICAL

EPSS Score

80.9%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.

Technical details

Published
2/18/2020

Frequently asked questions

What is CVE-2020-8010?

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.

Is CVE-2020-8010 actively exploited?

Active exploitation of CVE-2020-8010 has not been confirmed. The EPSS score is 80.9%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2020-8010?

CVE-2020-8010 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2020-8010 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.