All CVE records
CVE-2023-2868 — Barracuda Networks ESG Appliance Improper Input Validation Vulnerability
CISA KEV listed
Added May 26, 2023 Remediate by June 16, 2023
Description
Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.
Required action
Apply updates per vendor instructions.
Notes
https://status.barracuda.com/incidents/34kx82j5n4q9; https://nvd.nist.gov/vuln/detail/CVE-2023-2868
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.