CVE-2020-8011

Published: Feb 18, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference vulnerability in the robot (controller) component. A remote attacker can crash the Controller service.

Affected (3)

Products: Broadcom: Unified Infrastructure Management

1 product

Unified Infrastructure Management

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Broadcom Unified Infrastructure Management	Up to 9.20
Broadcom Unified Infrastructure Management	From 20.3.0 to 20.4.0
Broadcom Unified Infrastructure Management	Version 20.1

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (4)

https://support.broadcom.com/external/content/security-advisories/CA20200205-01-Security-Notice-for-CA-Unified-Infrastructure-Management/7832

Source: vuln@ca.com

Vendor Advisory

https://techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-for-ca-unified-infrastructure-management.html

Source: vuln@ca.com

Vendor Advisory

https://support.broadcom.com/external/content/security-advisories/CA20200205-01-Security-Notice-for-CA-Unified-Infrastructure-Management/7832

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-for-ca-unified-infrastructure-management.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.