Firetruck

CVE-2023-2868

KEV

Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

View CVE record →
Vendor / Project
Barracuda Networks
Product
Email Security Gateway (ESG) Appliance
Date added
May 26, 2023
Due date
Jun 16, 2023
Known ransomware use
Unknown
CWEs
CWE-20

Description

Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.

Required action

Apply updates per vendor instructions.

Notes