Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

Barracuda has disclosed two vulnerabilities in its products that can be chained together to bypass authorization controls and gain root access. The vulnerabilities include a pre-authentication authorization bypass and a command injection flaw. These vulnerabilities have been assigned a CVE identifier, with one having a CVSS score of 9.3, indicating a high level of severity. If exploited together, they could allow an attacker to access a susceptible device without proper authorization. The vulnerabilities pose a significant risk to affected devices, potentially leading to unauthorized access.