Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2020-17500 Details

Description

Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection (issue 1 of 4). The NDN-210 has a web administration panel which is made available over https. The logon method is basic authentication. There is a command injection issue that will result in unauthenticated remote code execution in the username and password fields of the logon prompt. The NDN-210 is part of Barco TransForm N solution and includes the patch from TransForm N version 3.8 onwards.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://www.barco.com/en/support/cms CVEVendor Advisory
https://www.barco.com/en/support/knowledge-base/kb11588 CVEVendor Advisory
https://www.barco.com/en/support/transform-n-management-server CVEVendor Advisory
https://www.barco.com/en/support/cms [email protected]Vendor Advisory
https://www.barco.com/en/support/knowledge-base/kb11588 [email protected]Vendor Advisory

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')[email protected]

Affected Products

ProductVersions
barco transform n
< 3.8

CPE

  • cpe:2.3:a:barco:transform_n:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
barco transform ndn-210 lite
All versions

CPE

  • cpe:2.3:h:barco:transform_ndn-210_lite:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
barco transform ndn-210 pro
All versions

CPE

  • cpe:2.3:h:barco:transform_ndn-210_pro:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
barco transform ndn-211 lite
All versions

CPE

  • cpe:2.3:h:barco:transform_ndn-211_lite:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
barco transform ndn-211 pro
All versions

CPE

  • cpe:2.3:h:barco:transform_ndn-211_pro:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2020-17500
NVD Published Date:
Jan 7, 2021
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2020-17500 Details - Not Deferred