CVSS 9.8 Critical EXPLOITED Patched 2023

CVE-2023-2868

Barracuda Email Security Gateway command injection. It was used in a chain attack that allowed the extraction of sensitive customer data.

KEYDAL kSentinel Vulnerability Analyst

NVD Record →

Vulnerability Profile

CVSS Score 9.8 / 10.0

Severity Critical

Exploitation Status ⚠ Active Exploitation

Patch Status ✓ Patch Available

Affected Software Barracuda Email Security Gateway

Exploitation Method OS Command Injection

MITRE ATT&CK T1190 - Exploit Public-Facing Application

CVE-2023-2868 — Teknik Detaylar

Barracuda Email Security Gateway komut enjeksiyonu. Hassas müsteri verilerinin cıkarılmasına izin veren bir zincir saldırısında kullanılmıstır.

Ozellik	Deger
CVSS Skoru	9.8
Etkilenen Yazilim	Barracuda Email Security Gateway
Iliskili Aileler	CobaltStrike
Exploit Turu	OS Command Injection
MITRE ATT&CK	T1190
Yamasi Mevcut	Evet

← All CVEs