CVE-2020-17504

The NDN-210 has a web administration panel which is made available over https

published January 8, 2021

CVSS
—
EPSS
3%
Percentile
87.2
In the wild
Unconfirmed
What it is

The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users to the administration panel to perform authenticated remote code execution. An issue exists in ngpsystemcmd.php in which the http parameters "x_modules" and "y_modules" are not properly handled. The NDN-210 is part of Barco TransForm N solution and this vulnerability is patched from TransForm N version 3.8 onwards.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02971 · 87.2th percentile
Published
2021-01-08T17:19Z
EPSS history
Timeline
  • 08 JAN 17:19Z
    The NDN-210 has a web administration panel which is made available over https
    cvelistv5