Barracuda’s security appliances have a security problem of their own

Barracuda, which offers a wide variety of cybersecurity devices, has been bitten by a bug itself.

The short version

• The company has disclosed two critical and high-severity vulnerabilities that, if chained together, could allow threat actors to bypass authorization controls and gain root access to devices.
• Attackers need to have access to the admin interface of a susceptible device to successfully exploit these vulnerabilities.
• Barracuda has released security patches, which it advises customers to apply immediately.

What happened

The vulnerabilities impact numerous popular Barracuda products Root access on an email gateway puts the attacker in the place that every inbound and outbound message passes, said Frank Dickson of Dickson Research. It may also expose the credentials and connections the gateway uses to reach the mail server and directory.

Why it matters

“Those are the keys to the kingdom, if you will,” he said.

Summary by Nerd News Network. Read the full article at Network World via the links above and below.