CVE-2023-2868

🗓️ 24 May 2023 18:00:52Reported by GoogleType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 1063 Views

Remote command injection vulnerability in Barracuda Email Security Gateway (v5.1.3.001-9.2.0.006

Reporter	Title	Published	Views	Family All 48
ICS	North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs	25 Jul 202412:00	–	ics
ATTACKERKB	CVE-2023-2868	24 May 202319:15	–	attackerkb
Information Security Automation	I have finalized the list of trending vulnerabilities for 2024 according to Positive Technologies	20 Jan 202515:02	–	avleonov
Tenable Nessus	Barracuda Email Security Gateway < 9.2.0.008 Command Injection (CVE-2023-2868)	23 Jun 202300:00	–	nessus
Circl	CVE-2023-2868	24 May 202322:27	–	circl
CISA KEV Catalog	Barracuda Networks ESG Appliance Improper Input Validation Vulnerability	26 May 202300:00	–	cisa_kev
CISA	CISA Releases IOCs Associated with Malicious Barracuda Activity	29 Aug 202312:00	–	cisa
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	26 May 202312:00	–	cisa
CISA	CISA Releases Malware Analysis Reports on Barracuda Backdoors	7 Sep 202312:00	–	cisa
CISA	Barracuda Networks Releases Update to Address ESG Vulnerability	15 Jun 202312:00	–	cisa

NVD

Vulners

Node

barracuda email_security_gateway_300_firmwareRange5.1.3.001–9.2.0.006

AND

barracuda email_security_gateway_300Match-

Node

barracuda email_security_gateway_400_firmwareRange5.1.3.001–9.2.0.006

AND

barracuda email_security_gateway_400Match-

Node

barracuda email_security_gateway_600_firmwareRange5.1.3.001–9.2.0.006

AND

barracuda email_security_gateway_600Match-

Node

barracuda email_security_gateway_800_firmwareRange5.1.3.001–9.2.0.006

AND

barracuda email_security_gateway_800Match-

Node

barracuda email_security_gateway_900_firmwareRange5.1.3.001–9.2.0.006

AND

barracuda email_security_gateway_900Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "Barracuda Email Security Gateway",
    "vendor": "Barracuda",
    "versions": [
      {
        "lessThan": "9.2.0.006",
        "status": "affected",
        "version": "5.1.3.001",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
status	www.status.barracuda.com/incidents/34kx82j5n4q9
barracuda	www.barracuda.com/company/legal/esg-vulnerability
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog