Replace Barracuda ESG appliances, company urges

Barracuda Networks is urging customers running phyisical Email Security Gateway (ESG) appliances to replace them immediately, “regardless of patch version level.” Vulnerability identification and disclosure Barracuda has identified a critical vulnerability (CVE-2023-2868) in their ESG appliances on May 19, 2023, and pushed a patch to them all on the following day. On May 21, “a script was deployed to all impacted appliances to contain the incident and counter unauthorized access methods.” The remote command injection … More →

The post …

barracuda barracuda networks critical critical vulnerability customers cve cve-2023-2868 data theft disclosure don't miss email email security email security gateway esg exploit gateway hot stuff identification malware may networks patch rapid7 security security gateway version vulnerability