Barracuda Email Security Gateway zero-day (CVE-2023-2868) ยท updates https://pwn.watch/i/barracuda-esg-zero-day-cve-2023-2868 A command injection in how Barracuda ESG appliances scan .tar attachments was exploited since October 2022 by China-nexus UNC4841 to backdoor appliances. Barracuda later told customers to replace compromised appliances outright, even after patching. en Thu, 15 Jun 2023 00:00:00 GMT Barracuda Email Security Gateway zero-day (CVE-2023-2868): Mandiant attributes the campaign to China-nexus UNC4841 https://pwn.watch/i/barracuda-esg-zero-day-cve-2023-2868 https://pwn.watch/i/barracuda-esg-zero-day-cve-2023-2868#2023-06-15-f7e5180f Thu, 15 Jun 2023 00:00:00 GMT critical <p><a href="https://cloud.google.com/blog/topics/threat-intelligence/barracuda-esg-exploited-globally">Source</a></p> Barracuda Email Security Gateway zero-day (CVE-2023-2868): Barracuda tells customers to replace compromised appliances immediately, regardless of patch level https://pwn.watch/i/barracuda-esg-zero-day-cve-2023-2868 https://pwn.watch/i/barracuda-esg-zero-day-cve-2023-2868#2023-06-06-78f41ddc Tue, 06 Jun 2023 00:00:00 GMT critical <p><a href="https://www.barracuda.com/company/legal/esg-vulnerability">Source</a></p> Barracuda Email Security Gateway zero-day (CVE-2023-2868): Barracuda: exploitation dates back to October 2022, with SALTWATER, SEASPY and SEASIDE malware https://pwn.watch/i/barracuda-esg-zero-day-cve-2023-2868 https://pwn.watch/i/barracuda-esg-zero-day-cve-2023-2868#2023-05-30-61937896 Tue, 30 May 2023 00:00:00 GMT critical <p><a href="https://www.barracuda.com/company/legal/esg-vulnerability">Source</a></p> Barracuda Email Security Gateway zero-day (CVE-2023-2868): CISA adds CVE-2023-2868 to the KEV catalog https://pwn.watch/i/barracuda-esg-zero-day-cve-2023-2868 https://pwn.watch/i/barracuda-esg-zero-day-cve-2023-2868#2023-05-26-cf12f307 Fri, 26 May 2023 00:00:00 GMT critical <p>Barracuda Email Security Gateway zero-day (CVE-2023-2868): CISA adds CVE-2023-2868 to the KEV catalog</p> Barracuda Email Security Gateway zero-day (CVE-2023-2868): Security patch pushed to all ESG appliances worldwide https://pwn.watch/i/barracuda-esg-zero-day-cve-2023-2868 https://pwn.watch/i/barracuda-esg-zero-day-cve-2023-2868#2023-05-20-46cc27d0 Sat, 20 May 2023 00:00:00 GMT critical <p><a href="https://www.barracuda.com/company/legal/esg-vulnerability">Source</a></p> Barracuda Email Security Gateway zero-day (CVE-2023-2868): Barracuda notices anomalous traffic from ESG appliances https://pwn.watch/i/barracuda-esg-zero-day-cve-2023-2868 https://pwn.watch/i/barracuda-esg-zero-day-cve-2023-2868#2023-05-18-a597fdbb Thu, 18 May 2023 00:00:00 GMT critical <p><a href="https://www.barracuda.com/company/legal/esg-vulnerability">Source</a></p>