Skip to content
COOEY

EXPOSURES › CVE-2022-0028

CVE-2022-0028

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-08-22 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-0028 ↗
⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatched

Palo Alto Networks PAN-OS suffered an active RDoS attack due to URL filtering policy misconfiguration.

A misconfiguration in Palo Alto Networks' PAN-OS URL filtering policy allowed network-based attackers to execute RDoS attacks, impacting network availability.

Shame score — Active exploitation of a known vulnerability leading to a denial-of-service attack.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks.

AFFECTED FEDRAMP PRODUCTS · 2
PRODUCTSTATUS
GCS-HIGH
Palo Alto Networks, Inc.
Ready
Palo Alto Networks Government Cloud Services
Palo Alto Networks, Inc.
Authorized