PT-2023-2171 · Barracuda · Barracuda Cloudgen Wan

Stefan Viehböck

·

Publicado

2023-01-12

·

Atualizado

2025-03-07

·

CVE-2023-26213

CVSS v2.0

8.5

Alta

VetorAV:N/AC:M/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Barracuda CloudGen WAN versions prior to 8 webui-sdwan-1089-8.3.1-174141891
Description The vulnerability is related to insufficient protection of the web interface structure in Barracuda CloudGen WAN when handling the /ajax/update certificate endpoint. Exploitation of this issue may allow a remote attacker to execute arbitrary commands by sending specially crafted HTTP requests. For example, a name field can contain :password and a password field can contain shell metacharacters.
Recommendations For versions prior to 8 webui-sdwan-1089-8.3.1-174141891, update to version 8 webui-sdwan-1089-8.3.1-174141891 or later to resolve the issue. As a temporary workaround, consider restricting access to the /ajax/update certificate endpoint until a patch is available. Avoid using the name and password fields in the affected API endpoint with potentially malicious input until the issue is resolved.

Exploit

Correção

OS Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-01913
CVE-2023-26213

Produtos afetados

Barracuda Cloudgen Wan