Backdoors Found in Barracuda Networks Gear
Summary: Barracuda Networks disclosed that its firewall, spam filter and VPN appliances shipped with undocumented backdoor accounts, which researcher Stefan Viehböck of SEC Consult found in November 2012 could be reached over SSH using the username "product" to access the device's MySQL database with no password. The devices were configured to accept those SSH connections only from Internet address ranges assigned to Barracuda, but a lookup on Robtex.com showed potentially hundreds of other companies operate in the same ranges, and the researchers found evidence the accounts had been in place since at least 2003.
What you should know: Barracuda rated the backdoor flaws a "medium" threat, and its fix still permits remote SSH login via the "root" account without a key exchange and does nothing to narrow the address ranges that can reach the accounts, which SEC Consult said Barracuda kept because they were vital for customer support.
Read the original at Krebs on Security ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026