Actively exploited vulnerability

CVE-2023-2868: Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.

CISA KEV source 26 May 2023 added 16 Jun 2023 remediation due

Barracuda Networks · Email Security Gateway (ESG) Appliance

Known ransomware use: Unknown

Apply updates per vendor instructions.

Dark Reading2 Aug 2023

CISA: 'Submarine' Backdoor Torpedoes Barracuda Email Security

A China-nexus cyber espionage campaign rages on with the fourth backdoor to surface in the wild that takes advantage of the CVE-2023-2868 zero-day security bug — with severe threat of lateral movement, CISA warns.

CVE-2023-2868: Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

Affected product

Required action

Related Yasna coverage

CISA: 'Submarine' Backdoor Torpedoes Barracuda Email Security