CVE-2023-2868 · Sandworm Watch

May 26, 2023high

CVE-2023-2868: Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection. Required action: Apply updates per vendor instructions.

CVE-2023-2868EPSS 87.0%Barracuda NetworksEmail Security Gateway (ESG) Appliance

CISA KEV ↗ · unattributed attribution