Exploit for Improper Input Validation in Barracuda Email_Security_Gateway_300_Firmware

🗓️ 20 Jun 2023 18:43:54Reported by cfielding-r7Type

githubexploit

githubexploit🔗 github.com👁 837 Views

Command Injection in Barracuda ESG 300 Firmware

Reporter	Title	Published	Views	Family All 49
ICS	North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs	25 Jul 202412:00	–	ics
ATTACKERKB	CVE-2023-2868	24 May 202319:15	–	attackerkb
Information Security Automation	I have finalized the list of trending vulnerabilities for 2024 according to Positive Technologies	20 Jan 202515:02	–	avleonov
Tenable Nessus	Barracuda Email Security Gateway < 9.2.0.008 Command Injection (CVE-2023-2868)	23 Jun 202300:00	–	nessus
BDU FSTEC	The vulnerability of the module responsible for checking embedded emails in the microprogramming-based email security gateway solution, Barracuda Email Security Gateway Appliance, allows a perpetrator to execute arbitrary code.	2 Jun 202300:00	–	bdu_fstec
Circl	CVE-2023-2868	24 May 202322:27	–	circl
CISA KEV Catalog	Barracuda Networks ESG Appliance Improper Input Validation Vulnerability	26 May 202300:00	–	cisa_kev
CISA	CISA Releases IOCs Associated with Malicious Barracuda Activity	29 Aug 202312:00	–	cisa
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	26 May 202312:00	–	cisa
CISA	CISA Releases Malware Analysis Reports on Barracuda Backdoors	7 Sep 202312:00	–	cisa

22 Feb 2025 18:01Current

9.9High risk

Vulners AI Score9.9

CVSS 3.19.4 - 9.8

EPSS0.86956

exploit barracuda email security gateway cve-2023-2868 command injection reverse shell