CVE-2023-2868: Barracuda Networks ESG Appliance Improper Input Validation

Barracuda Networks ESG Appliance Improper Input Validation Vulnerability. Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.

• CISA KEV-listed (remediation due 2023-06-16)
• EPSS 87.4% (99.7% percentile)
• CVSS 9.4 critical

Linked threat actors

• UNC4841

Browse the CVE database

Read the full analysis on IntelFusions