CVE-2022-0028

Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability

Pan-Os

A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The DoS attack would appear to originate from a Palo Alto Networks PA-Series (hardware), VM-Series (virtual) and CN-Series (container) firewall against an attacker-specified target. To be misused by an external attacker, the firewall configuration must have a URL filtering profile with one or more blocked categories…

10. Aug 2022

Ausgewertete Quellen

• Hinweis
  https://security.paloaltonetworks.com/CVE-2022-0028
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0028
• CISA
  Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
• NVD
  CVE-2022-0028