High · 7.2 CVE-2023-28742 EUVD-2023-32380GHSA-gqj6-hjr3-p5gm

BIG-IP iQuery mesh vulnerability

Published May 3, 2023 · Updated Feb 3, 2025 · Assigned by f5

Description

When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Vendor	Product	Affected	Fixed
F5	BIG-IP	17.1.0 – < 17.1.0.1, 17.0.0, 16.1.0 – < 16.1.3.4, 15.1.0 – < 15.1.8.2, 14.1.0 – < 14.1.5.4, 13.1.0	17.1.0.1