CVE-2020-8010

This is a flaw in software used to monitor and manage computer systems. It is like leaving a maintenance control panel unlocked: an outsider could issue instructions, inspect information, or alter files on the managed system.

This matters to you if you run CA Unified Infrastructure Management (Nimsoft/UIM) to monitor or manage servers, applications, or network equipment. An attacker does not need a login or someone to click something; it is only a risk where the affected robot/controller service is reachable by the attacker.

A public exploit is available, meaning attackers have a ready-made way to target this weakness. Treat this as a red-priority issue: limit access immediately and have your IT provider apply the vendor remediation on an urgent schedule.

Confirm exposure by inventorying CA Unified Infrastructure Management (Nimsoft/UIM) installations and checking whether they are version 20.1, 20.3.x, or 9.20 and below. Identify robot/controller endpoints and determine whether untrusted networks, especially the internet, can reach them.

The supplied vendor advisory identifies remediation but does not provide an exact corrected version or branch-specific target in these findings; use the advisory to select the vendor-approved release for your deployment and follow its upgrade instructions. No package-manager upgrade command applies to this product.

If an upgrade is delayed, restrict robot/controller access with network rules so only approved UIM management hosts can connect, and remove any internet exposure. Review controller and managed-host logs for unexpected command execution, file changes, new services, or unfamiliar remote connections; investigate and contain affected hosts if found. CVE-2020-8010 is not listed in CISA KEV, so no CISA remediation due date applies.

CVE-2020-8010 is rated CVSS 9.8 Critical (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The issue is improper ACL handling in the UIM robot/controller component, allowing remote unauthenticated command execution plus target-system read/write access. One public exploit is known. EPSS predicts a 50.7% likelihood (99th percentile) and the trend is falling; this is predictive, not confirmation of active exploitation. The vulnerability is not listed in CISA KEV.