Picus-RedReport-2024
Mentions the CVE; no further detail.
CVE-2023-7102 Public exploit EPSS 44.6%
Remote Code Execution (RCE) Vulnerability
Barracuda Networks Inc. · Barracuda ESG Appliance
Summary
The flaw is a remote code execution vulnerability in the Barracuda ESG Appliance from Barracuda Networks Inc., caused by a third-party library that enables parameter injection. An attacker could exploit it to run code on the appliance.
Official description · CVE.org
Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable logic.
Priority scorePatchfirst’s 0 to 100 ranking. It adds points for CISA KEV listing, ransomware use, EPSS, threat reports, public exploit code and CVSS. Every CVE page shows the breakdown. Breakdown
65.0 / 100
- Exploited
- Yes, in VulnCheck KEV
- Reports
- 1
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
First seen exploited the day it was disclosed. Public exploit code (Metasploit) was available the same day.
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.
What security researchers reported
Named in 1 threat report1 reportpicussecurity.com
Reports are matched by finding the exact id CVE-2023-7102 in their text; nobody has reviewed the match. One passage is shown per report, at most 320 characters, linked to the original.
Also mentioned in 3 community threat pulses (AlienVault OTX)
Weaker evidencePulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.