CVE-2023-2868 is a critical remote command injection vulnerability affecting Barracuda Email Security Gateway appliances (versions 5.1.3.001-9.2.0.006). This flaw, stemming from inadequate sanitization of .tar file names, allows remote attackers to execute system commands with high privileges. With a CVSS score of 9.8 (Critical), it poses a severe risk of complete compromise (confidentiality, integrity, availability). This vulnerability is actively exploited in the wild, has a high EPSS score, and has garnered significant community discussion and media coverage, despite no public exploit code being available.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 5.1.3.001, <= 9.2.0.006CPE matchmatch criteria | cpe:2.3:o:barracuda:email_security_gateway_300_firmware:*:*:*:*:*:*:*:* | ||
>= 5.1.3.001, <= 9.2.0.006CPE matchmatch criteria | cpe:2.3:o:barracuda:email_security_gateway_400_firmware:*:*:*:*:*:*:*:* | ||
>= 5.1.3.001, <= 9.2.0.006CPE matchmatch criteria | cpe:2.3:o:barracuda:email_security_gateway_600_firmware:*:*:*:*:*:*:*:* | ||
>= 5.1.3.001, <= 9.2.0.006CPE matchmatch criteria | cpe:2.3:o:barracuda:email_security_gateway_800_firmware:*:*:*:*:*:*:*:* | ||
>= 5.1.3.001, <= 9.2.0.006CPE matchmatch criteria | cpe:2.3:o:barracuda:email_security_gateway_900_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.