PT-2023-21932 · Unknown · Dns Iquery Mesh

Published 2023-05-03 · Updated 2023-05-10 · CVE-2023-28742

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DNS iQuery mesh (affected versions not specified)

Description A remote command execution issue exists when DNS is provisioned, allowing authenticated attackers to execute commands. The issue is related to the DNS iQuery mesh.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2023-28742

Affected Products

Dns Iquery Mesh

References · 5

• https://osv.dev/vulnerability/CVE-2023-28742 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28742 · Security Note
• https://my.f5.com/manage/s/article/K000132972 · Vendor Advisory
• https://t.me/cvenotify/49729 · Telegram Post
• https://t.me/cvenotify/50167 · Telegram Post