Products of the Application Delivery and Data Protection Solutions, Barracuda Networks are affected by several critical vulnerabilities (backdoor & authentication bypass). Attackers could use the found vulnerabilities to gain unauthorized access to the appliance. All Barracuda Networks appliances with the exception of the Barracuda Backup Server, Barracuda Firewall, and Barracuda NG Firewall are affected. Customers are advised to update their Security Definitions to v2.0.5 immediately.
Barracuda Networks has already released their alert for both flaws (authentication bypass & backdoors).
SEC Consult has also already contacted CERT teams including US-CERT, CERT at (Austria) and CERT-Bund (BSI Germany).
