Approved changes feed: RSS · Atom

cpe:2.3:a:realtimelogic:barracudadrive:6.5:*:*:*:*:*:*:*

part: a version: 6.5 update: *

VendorRealtimelogic (cc8ae952-f3c1-533d-afb4-7c7f3a20874b)
ProductBarracudadrive (83b1dcde-b455-5834-9a19-5c96328c1e2d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-23834 vulnerable 2026-06-08 05:22:32.127282 Details available
HIGH (8.8)
Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to escalate privileges to admin by replacing the %SYSTEMDRIVE%\bd\bd.exe file. When the computer next starts, the new bd.exe will be run as LocalSystem.
Published: 2020-09-04T03:38:40.000Z
Updated: 2024-08-04T15:05:11.312Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3808 vulnerable 2026-06-08 05:05:42.841989 Details available
Multiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive before 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) role parameter to roles.lsp, (2) name parameter to user.lsp, (3) path parameter to wizard/setuser.lsp, (4) host parameter to tunnelconstr.lsp, or (5) newpath parameter to wfsconstr.lsp in rtl/protected/admin/.
Published: 2014-05-21T14:00:00.000Z
Updated: 2024-08-06T10:57:17.575Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.