FBI confirms Barracuda patch is not effective for exploited ESG appliances

🗓️ 29 Aug 2023 14:30:00Reported by Malwarebytes blogType

FBI confirms Barracuda patch ineffective for exploited ESG appliances, vulnerability used by threat acto

Reporter	Title	Published	Views	Family All 49
ICS	North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs	25 Jul 202412:00	–	ics
ATTACKERKB	CVE-2023-2868	24 May 202319:15	–	attackerkb
Information Security Automation	I have finalized the list of trending vulnerabilities for 2024 according to Positive Technologies	20 Jan 202515:02	–	avleonov
Tenable Nessus	Barracuda Email Security Gateway < 9.2.0.008 Command Injection (CVE-2023-2868)	23 Jun 202300:00	–	nessus
BDU FSTEC	The vulnerability of the module responsible for checking embedded emails in the microprogramming-based email security gateway solution, Barracuda Email Security Gateway Appliance, allows a perpetrator to execute arbitrary code.	2 Jun 202300:00	–	bdu_fstec
Circl	CVE-2023-2868	24 May 202322:27	–	circl
CISA KEV Catalog	Barracuda Networks ESG Appliance Improper Input Validation Vulnerability	26 May 202300:00	–	cisa_kev
CISA	CISA Releases IOCs Associated with Malicious Barracuda Activity	29 Aug 202312:00	–	cisa
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	26 May 202312:00	–	cisa
CISA	CISA Releases Malware Analysis Reports on Barracuda Backdoors	7 Sep 202312:00	–	cisa