High severity8.8NVD Advisory· Published Jul 18, 2017· Updated May 13, 2026
CVE-2017-6320
CVE-2017-6320
Description
A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (2015-11-26) and v6.0.1.006 (2016-08-19); fixed in 6.1.0.003 (2017-01-17)) in which an authenticated user can execute arbitrary shell commands and gain root privileges. The vulnerability stems from unsanitized data being processed in a system call when the delete_assessment command is issued.
Affected products
1- cpe:2.3:a:barracuda:load_balancer_adc:*:*:*:*:*:*:*:*Range: <=6.0.1.006
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.exploit-db.com/exploits/42333/nvdExploitThird Party AdvisoryVDB Entry
- campus.barracuda.com/product/loadbalanceradc/article/ADC/ReleaseNotes610003/nvdVendor Advisory
News mentions
0No linked articles in our index yet.