CVE-2025-10847 — DX UIM Probe Improper ACL Handling RCE

CVE-2025-10847

DX UIM Probe Improper ACL Handling RCE PUBLISHED

Description (CNA)

DX Unified Infrastructure Management (Nimsoft/UIM) and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.

Affected (CNA)

Vendor / product	Versions
Broadcom / Unified Infrastructure Management	affected 23.4.5

CWE

No CWE identifiers supplied.

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36180

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.