CVEvulnerability

CVE-2023-7102

9.8 CRITICAL Published 2023-12-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-12-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1104

Description

Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable logic.

Affected configurations

• barracuda email security gateway 300 firmware (>= 5.1.3.001 <= 9.2.1.001) • barracuda email security gateway 400 firmware (>= 5.1.3.001 <= 9.2.1.001) • barracuda email security gateway 600 firmware (>= 5.1.3.001 <= 9.2.1.001) • barracuda email security gateway 800 firmware (>= 5.1.3.001 <= 9.2.1.001) • barracuda email security gateway 900 firmware (>= 5.1.3.001 <= 9.2.1.001)

Related

Weakness · CWE (1)

  • CWE-1104 Use of Unmaintained Third Party Components weakness

References