CVE-2023-2868: Barracuda Networks ESG Appliance Improper Input Validation
Barracuda Networks ESG Appliance Improper Input Validation Vulnerability. Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.
- CISA KEV-listed (remediation due 2023-06-16)
- EPSS 87.7% (99.8% percentile)
- CVSS 9.4 critical
Linked threat actors
- UNC4841 machine-inferred link