CVE-2020-8012

EPSS 77.6%

Vexday Risk Score

62Prioridad alta

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

PoC popular en GitHub (83 estrellas) — código de explotación ampliamente disponible.

CVSS —EPSS 77.6%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Ciclo de vida

26 abr 2017PoC pública

05 feb 2020Exploit Metasploit disponible

18 feb 2020Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute arbitrary code.

Productos afectados

CA Technologies - A Broadcom Company · CA Unified Infrastructure Management (Nimsoft/UIM)

PoCs públicas encontradas — 4

githubgithub.com/wetw0rk/Exploit-Development★ 83 cve_referencepacketstormsecurity.com/files/156577/Nimsoft-nimcontroller-7.80-Remote-Code-Execution.htmlno verificado cve_referencepacketstormsecurity.com/files/158693/CA-Unified-Infrastructure-Management-Nimsoft-7.80-Buffer-Overflow.htmlno verificado exploitdbwww.exploit-db.com/exploits/48156no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://packetstormsecurity.com/files/156577/Nimsoft-nimcontroller-7.80-Remote-Code-Execution.html http://packetstormsecurity.com/files/158693/CA-Unified-Infrastructure-Management-Nimsoft-7.80-Buffer-Overflow.html https://support.broadcom.com/external/content/security-advisories/CA20200205-01-Security-Notice-for-CA-Unified-Infrastructure-Management/7832 https://techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-for-ca-unified-infrastructure-management.html