An improper neutralization of shell metacharacters vulnerability exists in the timezone configuration field of certain Barracuda appliance products. This flaw allows an authenticated administrator to inject operating system commands that execute with root privileges when the crafted timezone value is processed. The vulnerability has a high severity score of 8.6 and affects Barracuda appliances using common Barracuda code. No specific affected versions or patches are currently documented.