ClosedPatched
Day · Jun 6, 2023
Barracuda Email Security Gateway zero-day (CVE-2023-2868)
Barracuda Email Security Gateway (appliance)
Updates on Jun 6, 2023
Barracuda tells customers to replace compromised appliances immediately, regardless of patch level
Source
Summary
A command injection in how Barracuda ESG appliances scan .tar attachments was exploited since October 2022 by China-nexus UNC4841 to backdoor appliances. Barracuda later told customers to replace compromised appliances outright, even after patching.
Read the full incident →
