Barracuda Load Balancer 5.0.0.015 vulnerabilities

A remote command injection vulnerability exists in the Barracuda Load Balancer product line, allowing an authenticated user to execute arbitrary shell commands and gain root privileges. The issue arises from unsanitized data being processed in a system call when the delete_assessment command is issued.

CVE-2014-8428 is a privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 due to an improperly protected SSH key.

Version 5.0.0.015 of Barracuda Load Balancer contains hard coded weak credentials.