CRITICAL CWE-1104
CVE-2023-7102
Remote Code Execution (RCE) Vulnerability
Barracuda Networks·Barracuda ESG Appliance
9.8/ 10
CVSS 3.1
Critical severity
45%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 99% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Dec 24, 2023
- Updated
- Aug 2, 2024
- First covered
- Nov 4, 2026
- Latest story
- 1 week ago
Summary
Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable logic.
CWE-1104Use of Unmaintained Third Party Components
Attack profile
Attack vectorNetwork
ComplexityLow
PrivilegesNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAffected products
- Barracuda Networks Barracuda ESG Appliance5.1.3.001 to 9.2.1.001