CVE-2022-0028VulnerabilityPublished 08/22/2022Updated 10/24/2026
CVE-2022-0028: Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
Affects Palo Alto Networks PAN-OSSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 08/22/2022
- KEV deadline
- 09/12/2022
- EPSS
- 2.5% chance of exploitation in 30 days – higher than 84% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks.