Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2020-17500

EPSS 4.47% · P89
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2020-17500

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection (issue 1 of 4). The NDN-210 has a web administration panel which is made available over https. The logon method is basic authentication. There is a command injection issue that will result in unauthenticated remote code execution in the username and password fields of the logon prompt. The NDN-210 is part of Barco TransForm N solution and includes the patch from TransForm N version 3.8 onwards.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Barco Transform NDN Device 命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Barco Transform NDN Device是荷兰巴可(Barco)公司的一款基于PC的网络图形处理器。该设备可显示来自Gbit以太网/ IP网络的编码流,支持H-264,MPEG-4,MPEG-2,MJPEG,V2D和ProServer等格式。 Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 存在安全漏洞,攻击者可利用该漏洞在登录提示符的用户名和密码字段中执行未经身份验证的远程
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2020-17500

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-17500

登录查看更多情报信息。

Same Patch Batch · n/a · 2021-01-07 · 36 CVEs total

CVE-2020-249024.7 MEDIUMQuiXplorer 跨站脚本漏洞
CVE-2021-3011Fido U2f 安全漏洞
CVE-2018-20314Foxit Reader和Foxit PhantomPDF 竞争条件问题漏洞
CVE-2018-20313Foxit Reader和Foxit PhantomPDF 竞争条件问题漏洞
CVE-2018-20312Foxit Reader and PhantomPDF 竞争条件问题漏洞
CVE-2018-20311Foxit Reader and PhantomPDF 竞争条件问题漏洞
CVE-2018-20310Foxit Reader and PhantomPDF 竞争条件问题漏洞
CVE-2018-20309Foxit Reader and PhantomPDF 竞争条件问题漏洞
CVE-2018-19418Foxit PDF SDK ActiveX 命令注入漏洞
CVE-2020-25476Liferay CMS Portal 跨站脚本漏洞
CVE-2018-20315Foxit Reader和Foxit PhantomPDF 竞争条件问题漏洞
CVE-2020-28672MonoCMS Blog 访问控制错误漏洞
CVE-2020-26773Sourcecodester Restaurant Reservation System SQL注入漏洞
CVE-2021-3029Evolucare Ecsimaging 操作系统命令注入漏洞
CVE-2020-24903CuteSoft Cute Editor 跨站脚本漏洞
CVE-2020-24901krpano Panorama Viewer 跨站脚本漏洞
CVE-2020-24900krpano Panorama Viewer 跨站脚本漏洞
CVE-2020-26768Formstone 跨站脚本漏洞
CVE-2021-23241Mercusys Mercury X18G 路径遍历漏洞
CVE-2020-36049Socketio Engineio 资源管理错误漏洞

Showing top 20 of 36 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2020-17500

No comments yet


Leave a comment