---
id: CVE-2025-10847
title: >-
  DX Unified Infrastructure Management (Nimsoft/UIM) and below contains an
  improper ACL handling vulnerability in the robot (controller) component
summary: >-
  DX Unified Infrastructure Management (Nimsoft/UIM) and below contains an
  improper ACL handling vulnerability in the robot (controller) component. A
  remote attacker can execute commands, read from, or write to the target
  system.
severity: none
cwe:
  - CWE-284
published: '2025-10-01'
updated: '2026-10-09'
sourceUpdated: '2026-10-09T09:10:00.213'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-10847'
references:
  - url: >-
      https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36180
    label: secure@symantec.com
tags:
  - nvd
epss: 0.00473
epssPercentile: 0.40685
ingestedAt: '2026-10-09T09:31:01.001Z'
---

## Overview

DX Unified Infrastructure Management (Nimsoft/UIM) and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.