PT-2023-2171 · Barracuda · Barracuda Cloudgen Wan
Stefan Viehböck
·
Published
2023-01-12
·
Updated
2025-03-07
·
CVE-2023-26213
CVSS v2.0
8.5
High
| Vector | AV:N/AC:M/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Barracuda CloudGen WAN versions prior to 8 webui-sdwan-1089-8.3.1-174141891
Description
The vulnerability is related to insufficient protection of the web interface structure in Barracuda CloudGen WAN when handling the
/ajax/update certificate endpoint. Exploitation of this issue may allow a remote attacker to execute arbitrary commands by sending specially crafted HTTP requests. For example, a name field can contain :password and a password field can contain shell metacharacters.Recommendations
For versions prior to 8 webui-sdwan-1089-8.3.1-174141891, update to version 8 webui-sdwan-1089-8.3.1-174141891 or later to resolve the issue.
As a temporary workaround, consider restricting access to the
/ajax/update certificate endpoint until a patch is available.
Avoid using the name and password fields in the affected API endpoint with potentially malicious input until the issue is resolved.Exploit
Fix
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Barracuda Cloudgen Wan