Wetw0Rk

**Name of the Vulnerable Software and Affected Versions** CA Unified Infrastructure Management (Nimsoft/UIM) versions 9.20 and below CA Unified Infrastructure Management (Nimsoft/UIM) version 20.1 CA Unified Infrastructure Management (Nimsoft/UIM) versions 20.3.x **Description** The issue is related to improper ACL handling in the robot (controller) component. A remote attacker can exploit this to execute commands, read from, or write to the target system. **Recommendations** For CA Unified Infrastructure Management (Nimsoft/UIM) versions 9.20 and below, update to a version above 9.20 to resolve the issue. For CA Unified Infrastructure Management (Nimsoft/UIM) version 20.1, update to a version other than 20.1 to resolve the issue. For CA Unified Infrastructure Management (Nimsoft/UIM) versions 20.3.x, update to a version outside of the 20.3.x range to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** LabF nfsAxe FTP client version 3.7 **Description** A buffer overflow issue allows an attacker to execute code remotely. **Recommendations** For version 3.7, update to a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Flexense SyncBreeze Enterprise version 10.1.16 **Description** The issue is related to an unauthenticated SEH based Buffer Overflow in the HTTP server. It can be triggered by sending a GET request with an excessive length, allowing a malicious user to overwrite the SEH record and potentially execute a payload under the Windows SYSTEM account. **Recommendations** For Flexense SyncBreeze Enterprise version 10.1.16, consider restricting access to the HTTP server until a patch is available. As a temporary workaround, limiting the length of incoming GET requests may help mitigate the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.