PT-2020-19917

CVE-2020-8012

·

Published

2020-02-18

·

Updated

2022-04-29

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions CA Unified Infrastructure Management (Nimsoft/UIM) versions 9.20 and below CA Unified Infrastructure Management (Nimsoft/UIM) version 20.1 CA Unified Infrastructure Management (Nimsoft/UIM) versions 20.3.x
Description The issue is a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute arbitrary code.
Recommendations For CA Unified Infrastructure Management (Nimsoft/UIM) versions 9.20 and below, update to a version above 9.20 to resolve the issue. For CA Unified Infrastructure Management (Nimsoft/UIM) version 20.1, update to a version above 20.1 to resolve the issue. For CA Unified Infrastructure Management (Nimsoft/UIM) versions 20.3.x, update to a version above 20.3.x to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾