CVE-2023-2868
Barracuda Networks ESG Appliance Improper Input Validation Vulnerability
CVSS
—
Sin CVSS
EPSS
87.0%
p100
KEV
SÍ
26 may 2023
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Producto
Barracuda Networks / Email Security Gateway (ESG) Appliance
Vulnerabilidad
Barracuda Networks ESG Appliance Improper Input Validation Vulnerability
Añadido a KEV
26 may 2023
Remediar antes de
16 jun 2023
Uso conocido en ransomware
No
Descripción resumida
Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.
Acción requerida
Apply updates per vendor instructions.
Notas
https://status.barracuda.com/incidents/34kx82j5n4q9; https://nvd.nist.gov/vuln/detail/CVE-2023-2868
Sin CVEs relacionados por CWE o producto.