Chinese Hackers Exploited New Zero-Day in Barracuda's ESG Appliances

Barracuda has revealed that Chinese threat actors exploited a new zero-day in its Email Security Gateway (ESG) appliances to deploy backdoor on a "limited number" of devices.
Tracked as CVE-2023-7102, the issue relates to a case of arbitrary code execution that resides within a third-party and open-source library Spreadsheet::ParseExcel that's used by the Amavis scanner within the

arbitrary code backdoor barracuda case chinese chinese hackers code code execution cve deploy devices email email security email security gateway esg exploited gateway hackers issue library party security security gateway spreadsheet third third-party threat threat actors zero-day