CVE-2020-17500

CRITICAL

9.8

CVSS Score

Published: January 7, 2021 at 08:51 PM UTC

Updated: June 17, 2026 at 02:59 AM UTC

5 products affected across 1 vendorTransform NTransform Ndn-211 ProTransform Ndn-210 Lite

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

CRITICAL9.8

Exploit prediction

EPSS 4%

Description

Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection (issue 1 of 4). The NDN-210 has a web administration panel which is made available over https. The logon method is basic authentication. There is a command injection issue that will result in unauthenticated remote code execution in the username and password fields of the logon prompt. The NDN-210 is part of Barco TransForm N solution and includes the patch from TransForm N version 3.8 onwards.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Transform N · Barco

95%

v < 3.8

Affected range stops below 3.8, so it looks safe — our inference, not a vendor statement

barco-transform-ndn-210-lite (same device) · barco-transform-ndn-210-pro (same device) · barco-transform-ndn-211-lite (same device) · barco-transform-ndn-211-pro (same device)

Transform Ndn-210 Lite · Barcodevice

80%

All versions

Transform Ndn-210 Pro · Barcodevice

80%

All versions

Transform Ndn-211 Lite · Barcodevice

80%

All versions

Transform Ndn-211 Pro · Barcodevice

80%

All versions