CVE-2020-17504

HIGH

7.2

CVSS Score

Published: January 8, 2021 at 05:19 PM UTC

Updated: June 17, 2026 at 02:59 AM UTC

5 products affected across 1 vendorTransform NTransform Ndn-211 ProTransform Ndn-210 Lite

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.2

Exploit prediction

EPSS 3%

Description

The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users to the administration panel to perform authenticated remote code execution. An issue exists in ngpsystemcmd.php in which the http parameters "x_modules" and "y_modules" are not properly handled. The NDN-210 is part of Barco TransForm N solution and this vulnerability is patched from TransForm N version 3.8 onwards.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Transform N · Barco

95%

v < 3.8

Affected range stops below 3.8, so it looks safe — our inference, not a vendor statement

barco-transform-ndn-210-lite (same device) · barco-transform-ndn-210-pro (same device) · barco-transform-ndn-211-lite (same device) · barco-transform-ndn-211-pro (same device)

Transform Ndn-210 Lite · Barcodevice

80%

All versions

Transform Ndn-210 Pro · Barcodevice

80%

All versions

Transform Ndn-211 Lite · Barcodevice

80%

All versions

Transform Ndn-211 Pro · Barcodevice

80%

All versions