PT-2025-40103 · Imsoft · Ca Unified Infrastructure Management+1

Published 2025-10-01 · Updated 2025-10-01 · CVE-2025-10847

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:L/U:Amber

Name of the Vulnerable Software and Affected Versions DX Unified Infrastructure Management (Nimsoft/UIM) versions prior to 8.63

Description The software contains an improper Access Control List (ACL) handling issue within the robot (controller) component. A remote attacker may be able to execute commands, read data from, or write data to the targeted system.

Recommendations Update to version 8.63 or later.

Fix

RCE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-10847

Affected Products

Ca Unified Infrastructure Management

Nimsoft Uim

References · 5

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36180 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10847 · Security Note
• https://twitter.com/CVEnew/status/1973345708968403087 · Twitter Post
• https://t.me/cveNotify/137045 · Telegram Post
• https://t.me/CVEtracker/33807 · Telegram Post