EXPOSURES › CVE-2022-0028
CVE-2022-0028
HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
⌖ EXPLOITED IN THE WILD
SHAME 72/100
exploited-in-wildunpatched
Palo Alto Networks PAN-OS suffered an active RDoS attack due to URL filtering policy misconfiguration.
A misconfiguration in Palo Alto Networks' PAN-OS URL filtering policy allowed network-based attackers to execute RDoS attacks, impacting network availability.
Shame score — Active exploitation of a known vulnerability leading to a denial-of-service attack.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
PLAYERS IMPLICATED
DESCRIPTION
A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks.
AFFECTED FEDRAMP PRODUCTS · 2
| PRODUCT | STATUS |
|---|---|
| GCS-HIGH Palo Alto Networks, Inc. |
Ready |
| Palo Alto Networks Government Cloud Services Palo Alto Networks, Inc. |
Authorized |