CRITICAL

CVE-2020-8012

CVSS v3

9.8

CRITICAL

EPSS Score

82.7%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute arbitrary code.

Technical details

Published
2/18/2020

Frequently asked questions

What is CVE-2020-8012?

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute arbitrary code.

Is CVE-2020-8012 actively exploited?

Active exploitation of CVE-2020-8012 has not been confirmed. The EPSS score is 82.7%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2020-8012?

CVE-2020-8012 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2020-8012 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.