CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Service Location Protocol (SLP) Protocol Design Flaw Reflective DDoS Amplification Vulnerability (CVE-2023-29552) Security Advisory
[Affected Scope] Any network devices, virtualization hosts (such as VMware ESXi), and storage systems exposed to the internet with the Service Location Protocol (SLP, RFC 2608) enabled
[Impact] Unauthenticated remote attackers can leverage spoofed UDP traffic to launch massive reflective Denial-of-Service (DDoS) attacks, achieving an extreme amplification factor of up to 2,200x
[Mitigation] Immediately block external access to SLP ports (UDP/TCP 427) or completely disable the SLP daemon in environments where it is not required
Palo Alto Networks PAN-OS URL Filtering Misconfiguration Reflected TCP Denial-of-Service Vulnerability (CVE-2022-0028) Analysis and Mitigation Guide
[Affected Scope] Palo Alto Networks PAN-OS firewalls (PA-Series, VM-Series, CN-Series) configured with a URL filtering profile containing blocked categories assigned to a source zone with an external-facing interface.
[Impact] Remote attackers can abuse the firewall as a reflector and amplifier to launch high-volume TCP Reflected Denial-of-Service (RDoS) attacks against arbitrary targets, masking their identity.
[Mitigation] Apply official PAN-OS software updates immediately, or review and remove URL filtering profiles from security policies applied to external-facing source zones.
Mitel MiCollab and MiVoice Business Express Remote Information Disclosure and DDoS Amplification Vulnerability (CVE-2022-26143)
[Affected Scope] Mitel MiCollab versions prior to 9.4 SP1 FP1 and MiVoice Business Express through version 8.1.
[Impact] Unauthenticated remote attackers can access sensitive system information or abuse the system to launch high-volume DDoS amplification attacks (TP240PhoneHome) globally.
[Mitigation] Apply official vendor security patches immediately and restrict external access to the TP-240 driver port (UDP 10074) via firewalls.