CVE-2025-10847CWE-284broken-access-control

CVE-2025-10847

published October 1, 2025

CVSS
8.4
EPSS
0%
Percentile
39.9
In the wild
Unconfirmed
What it is

DX Unified Infrastructure Management (Nimsoft/UIM) and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.

The record
Technical detail
CVSS
8.4 · NONE
CVSS v4.0
Not supplied
EPSS
0.00473 · 39.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-10-01T15:15Z
References (1)
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36180 · [email protected]
EPSS history
Timeline
  • 01 OCT 10:48Z
    DX UIM Probe Improper ACL Handling RCE
    cvelistv5