CVE-2022-0028

MITRE NVD CVE.ORG Print: PDF PDF

Summary

CVECVE-2022-0028
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2022-08-10 16:15:00 UTC
Updated2022-08-24 13:26:00 UTC
DescriptionA PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The DoS attack would appear to originate from a Palo Alto Networks PA-Series (hardware), VM-Series (virtual) and CN-Series (container) firewall against an attacker-specified target. To be misused by an external attacker, the firewall configuration must have a URL filtering profile with one or more blocked categories assigned to a source zone that has an external facing interface. This configuration is not typical for URL filtering and, if set, is likely unintended by the administrator. If exploited, this issue would not impact the confidentiality, integrity, or availability of our products. However, the resulting denial-of-service (DoS) attack may help obfuscate the identity of the attacker and implicate the firewall as the source of the attack. We have taken prompt action to address this issue in our PAN-OS software. All software updates for this issue are expected to be released no later than the week of August 15, 2022. This issue does not impact Panorama M-Series or Panorama virtual appliances. This issue has been resolved for all Cloud NGFW and Prisma Access customers and no additional action is required from them.

Risk And Classification

EPSS: 0.046820000 probability, percentile 0.892950000 (date 2026-04-01)

CISA KEV: Listed on 2022-08-22; due 2022-09-12; ransomware use Unknown

Problem Types: NVD-CWE-Other

CISA Known Exploited Vulnerability

VendorPalo Alto Networks
ProductPAN-OS
NamePalo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
Required ActionApply updates per vendor instructions.
Noteshttps://security.paloaltonetworks.com/CVE-2022-0028; https://nvd.nist.gov/vuln/detail/CVE-2022-0028

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Paloaltonetworks Pan-os All All All All

References

ReferenceSourceLinkTags
CVE-2022-0028 PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering CONFIRM security.paloaltonetworks.com
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis
CISA Known Exploited Vulnerabilities catalog CISA www.cisa.gov kev

Vendor Comments And Credit

Discovery Credit

LEGACY: Palo Alto Networks thanks CERT-XLM for reporting this issue.

Legacy QID Mappings

  • 730595 Palo Alto Networks (PAN-OS) Reflected Amplification Denial of Service (DoS) Vulnerability (PAN-192999)
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report