CVE-2019-6724: barracuda vpn_client Untrusted Search Path
Vulnerability summary
CVE-2019-6724 is a high (CVSS 7.8) Untrusted Search Path vulnerability in barracuda vpn_client. EPSS estimates a 0.52% chance of exploitation in the next 30 days, higher than 43.2% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 18-03-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary code executing as root.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.52%
Chance of exploitation in the next 30 days
Percentile
43%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.52% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (blog.mirch.io)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Barracuda1 product
- vpn_client< 5.0.2.7
1 vendor · 1 product
References
3 links- blog.mirch.io/2019/02/14/cve-2019-6724-barracuda-vpn-client-privilege-escalation-on-linux-and-macos/X Refsource MISCExploitThird Party Advisory