CVE-2020-17503

7.2 highEPSS 3.0%

High (7.2) in barco transform n. EPSS 3.0% chance of exploitation in the next 30 days.

The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users to the administration panel to perform authenticated remote code execution. An issue exists in split_card_cmd.php in which the http parameter "locking" is not properly handled. The NDN-210 is part of Barco TransForm N solution and this vulnerability is patched from TransForm N version 3.8 onwards.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2021-01-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

barco:transform_n

References

https://www.barco.com/en/support/cms
https://www.barco.com/en/support/knowledge-base/kb11589
https://www.barco.com/en/support/transform-n-management-server
https://www.barco.com/en/support/cms
https://www.barco.com/en/support/knowledge-base/kb11589

Check your stack JSON