Vulnerability Description
Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection (issue 1 of 4). The NDN-210 has a web administration panel which is made available over https. The logon method is basic authentication. There is a command injection issue that will result in unauthenticated remote code execution in the username and password fields of the logon prompt. The NDN-210 is part of Barco TransForm N solution and includes the patch from TransForm N version 3.8 onwards.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Barco | Transform N | < 3.8 |
| Barco | Transform Ndn-210 Lite | - |
| Barco | Transform Ndn-210 Pro | - |
| Barco | Transform Ndn-211 Lite | - |
| Barco | Transform Ndn-211 Pro | - |
Related Weaknesses (CWE)
References
- https://www.barco.com/en/support/cmsVendor Advisory
- https://www.barco.com/en/support/knowledge-base/kb11588Vendor Advisory
- https://www.barco.com/en/support/transform-n-management-serverVendor Advisory
- https://www.barco.com/en/support/cmsVendor Advisory
- https://www.barco.com/en/support/knowledge-base/kb11588Vendor Advisory
- https://www.barco.com/en/support/transform-n-management-serverVendor Advisory
FAQ
What is CVE-2020-17500?
CVE-2020-17500 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection (issue 1 of 4). The NDN-210 has a web administration panel which is made available over htt...
How severe is CVE-2020-17500?
CVE-2020-17500 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-17500?
Check the references section above for vendor advisories and patch information. Affected products include: Barco Transform N, Barco Transform Ndn-210 Lite, Barco Transform Ndn-210 Pro, Barco Transform Ndn-211 Lite, Barco Transform Ndn-211 Pro.