CVE-2023-28742 BIG-IP iQuery mesh vulnerability

What is CVE-2023-28742?

CVE-2023-28742 is a high-severity command injection vulnerability in F5 Big-Ip Domain Name System, published on 3 May 2023. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Weakness: CWE-78

Which versions are affected by CVE-2023-28742?

It affects 1 product.

Products include F5 Big-Ip Domain Name System.

How do I fix CVE-2023-28742?

No fix has been published for CVE-2023-28742 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2023-28742 being exploited?

There is no known exploitation of CVE-2023-28742 in the wild and no public exploit code.

Other vulnerabilities in F5 Big-Ip Domain Name System

• CVE-2022-23013 Cross-site scripting in BIG-IP DNS & GTM High 8.8
• CVE-2026-40061 iControl REST and tmsh vulnerability High 8.5
• CVE-2022-41787 BIG-IP DNS Express vulnerability CVE-2022-41787 High 7.5
• CVE-2021-23032 Denial of service in BIG-IP DNS High 7.5
• CVE-2020-27717 Denial of service in BIG-IP DNS High 7.5

All F5 Big-Ip Domain Name System vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-gqj6-hjr3-p5gm.