Barracuda

Records18All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Barracuda records in CISA KEV

TI-2023-02687 Barracuda Networks ESG Appliance Improper Input Validation Vulnerability CRITICAL 100KEV 2023-05-26

Components

Products in the NVD configurations · select one to filter the records

Rmm 4 records HIGH Email Security Gateway 300 Firmware 2 records CRITICAL Email Security Gateway 400 Firmware 2 records CRITICAL Email Security Gateway 600 Firmware 2 records CRITICAL Email Security Gateway 800 Firmware 2 records CRITICAL Email Security Gateway 900 Firmware 2 records CRITICAL Load Balancer 2 records MEDIUM Web Filter 2 records LOW

Records

2 records in Email Security Gateway 900 Firmware · all components

TI-2023-02687 CVE-2023-2868 · GHSA-898g-hmh5-hrcr

Remote Code injection in Barracuda Email Security Gateway

CRITICAL 100KEV

A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions 5.1.3.001-9.2.0.006.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.86841 Published 2023-05-24 Fixed in 9.2.0.006 CWE-20

TI-2023-06497 CVE-2023-7102 · GHSA-ccqc-vx6w-76x6

Remote code execution (RCE) in Barracuda ESG Appliance

HIGH 71

Use of a Third Party library produced a vulnerability in Barracuda Networks Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.44575 Published 2023-12-24 No fix listed CWE-1104

Open these records in search →

Critical	8
High	5
Medium	5
Low	0
No CVSS	0