CVE-2023-7102observed exploitationCWE-1104

CVE-2023-7102: vulnerability in Barracuda ESG Appliance

Remote Code Execution (RCE) Vulnerability

Published · Updated

Follow this CVE+ Monitor Barracuda ESG Appliance

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

52Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actepss 45%
from disclosure to weaponsame day
Published on NVDDec 24
metasploitDec 24
VulnCheckDec 24
Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable logic.
Affected products
Barracuda Networks Inc. · Barracuda ESG Appliance