An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a…
An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Barracuda
- Product
- Barracuda Email Security Gateway (ESG)
- CVSS v4.0
- 9.3 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Weakness
- CWE-288
- Exposure class
- NVD status
- Received
Why it ranks 45 (High)
- CVSS v4.0 9.3 critical
- Exposed product class: email
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.