CVE-2023-2868 — Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

CISA KEVExploited: confirmedBarracuda Networks

Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.

Vulnerability details

Affected productsEmail Security Gateway (ESG) Appliance
KEV remediation due2023-06-16