CVE-2025-10847

CWE-284 — Improper Access Control3 documents3 sources

Severity

8.4HIGH

EPSS

0.2%

top 62.04%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Broadcom Unified Infrastructure Management

Timeline

PublishedOct 1

Description

DX Unified Infrastructure Management (Nimsoft/UIM) and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:N/SA:L/S:N

Affected Packages1 packages

▶CVEListV5broadcom/unified_infrastructure_management23.4.5

🔴Vulnerability Details

GHSA

GHSA-rqx4-2q9h-8rv8: DX Unified Infrastructure Management (Nimsoft/UIM) and below contains an improper ACL handling vulnerability in the robot (controller) component↗2025-10-01

▶

CVEList

DX UIM Probe Improper ACL Handling RCE↗2025-10-01

▶