CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-08-10
Palo Alto Networks PAN-OS URL Filtering Misconfiguration Reflected TCP Denial-of-Service Vulnerability (CVE-2022-0028) Analysis and Mitigation Guide
[Affected Scope] Palo Alto Networks PAN-OS firewalls (PA-Series, VM-Series, CN-Series) configured with a URL filtering profile containing blocked categories assigned to a source zone with an external-facing interface.
[Impact] Remote attackers can abuse the firewall as a reflector and amplifier to launch high-volume TCP Reflected Denial-of-Service (RDoS) attacks against arbitrary targets, masking their identity.
[Mitigation] Apply official PAN-OS software updates immediately, or review and remove URL filtering profiles from security policies applied to external-facing source zones.