Latest Barracuda Vulnerabilities

● CVE-2023-7102

Remote Code Execution (RCE) Vulnerability

Barracuda Email Security Gateway 300 Firmware>=5.1.3.001<=9.2.1.001

Barracuda Email Security Gateway 300

Barracuda Email Security Gateway 400 Firmware>=5.1.3.001<=9.2.1.001

Barracuda Email Security Gateway 400

Barracuda Email Security Gateway 600 Firmware>=5.1.3.001<=9.2.1.001

Barracuda Email Security Gateway 600

and 4 more

● CVE-2023-2868

Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

Barracuda Networks Email Security Gateway (ESG) Appliance

Barracuda Email Security Gateway 300 Firmware>=5.1.3.001<=9.2.0.006

Barracuda Email Security Gateway 300

Barracuda Email Security Gateway 400 Firmware>=5.1.3.001<=9.2.0.006

Barracuda Email Security Gateway 400

Barracuda Email Security Gateway 600 Firmware>=5.1.3.001<=9.2.0.006

and 5 more

● CVE-2023-26213

On Barracuda CloudGen WAN Private Edge Gateway devices before 8 webui-sdwan-1089-8.3.1-174141891, an OS command injection vulnerability exists in /ajax/update_certificate - a crafted HTTP request allo...

Barracuda T100b Firmware=8.3.1

Barracuda T100b

Barracuda T200c Firmware=8.3.1

Barracuda T200c

Barracuda T400c Firmware=8.3.1

Barracuda T400c

and 8 more

● CVE-2021-42711

Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with SYSTEM privileges when an unprivileged user performs a repair...

Barracuda Network Access Client<5.2.2

● CVE-2019-5648

Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware <= v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to...

Barracuda Load Balancer Adc Firmware<=6.4

Barracuda Load Balancer ADC

● CVE-2014-2595

Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string.

Barracuda Web Application Firewall=7.8.1.013

● CVE-2019-6724

The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local attacker to load a malici...

Barracuda VPN Client<5.0.2.7

Apple Mac OS X

Linux Linux kernel

Openbsd Openbsd

● CVE-2018-20369

Barracuda Message Archiver 2018 has XSS in the error_msg exception-handling value for the ldap_user parameter to the cgi-mod/ldap_load_entry.cgi module. The injection point of the issue is the Add_Upd...

Barracuda Message Archiver=2018

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.