Several OpenSSL Vulnerabilities- (CVE-2023-0286, CVE-2022-4304, CVE-2022-4203, CVE-2023-0215, CVE-2022-4450, CVE-2023-0216, CVE-2023-0217 and CVE-2023-0401)

Barracuda Networks: Following AppSec portfolio product-lines are vulnerable to the below mentioned CVE's, and the subsequent section details their identified effect.

1. Barracuda Web Application Firewall
2. Barracuda Web Application Firewall-as-a- Service
3. Barracuda Load Balancer ADC.

CVE Impact

• CVE-2023-0286 (High)          -  Impacts customers using CRL's
• CVE-2022-4304 (Moderate) - Affects deployment using RSA based ciphers
• CVE-2023-0215 (Moderate) - Affected as per vendor advisory
• CVE-2022-4450 (Moderate) - Affected as per vendor advisory
• CVE-2022-4203 (Moderate) –No effect as per available data 
• CVE-2023-0216 (Moderate) – No effect as per available data
• CVE-2023-0217 (Moderate) – No effect as per available data
• CVE-2023-0401 (Moderate) – No effect as per available data

WAF, WAFaaS, and ADC Advisory

We will be rolling out fix. Meanwhile for manual application of the fix, please get in touch with Barracuda Support Team.