Lucene search
PRIOn knowledge basePRION:CVE-2020-17502HistoryJan 08, 2021 - 6:15 p.m.
Command injection
2021-01-0818:15:00
PRIOn knowledge base
www.prio-n.com
2
Barco TransForm N before 3.8 allows Command Injection (issue 2 of 4). The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users of the administration panel to perform authenticated remote code execution. An issue exists in split_card_cmd.php in which the http parameters xmodules, ymodules and savelocking are not properly handled. The NDN-210 is part of Barco TransForm N solution and includes the patch from TransForm N version 3.8 onwards.
| CPE | Name | Operator | Version |
|---|---|---|---|
| transform_n | lt | 3.8 |
Related
cve
cve
CVE-2020-17502
2021-01-08 18:15:13
cvelist
cvelist
CVE-2020-17502
2021-01-08 17:15:57
nvd
nvd
CVE-2020-17502
2021-01-08 18:15:13