8.4 High

CVE-2025-10847 DX Unified Infrastructure Management (Nimsoft/UIM) and below contains an improper ACL handling vulnerability in the…

Description

DX Unified Infrastructure Management (Nimsoft/UIM) and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.

Affected products and versions

Product	Affected versions	Fixed in
Unified Infrastructure Management	23.4.5	No fix stated

Do you use Unified Infrastructure Management?

Track this CVE Watch Unified Infrastructure Management Check my SBOMs

www.cveye.io/en/cve/CVE-2025-10847

Timeline

Published October 1, 2025
Last modified February 26, 2026

References

support.broadcom.com support.broadcom.com

Track this CVE