UpHeron
All vulnerabilities

Servers and applications

CVE-2022-0028

A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The DoS attack would appear to originate from a Palo Alto Networks PA-Series (hardware), VM-Series (virtual) and CN-Series (container) firewall against an attacker-specified target. To be misused by an external attacker, the firewall…

Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 22 Aug 2022.

Severity
High 8.6
Published
10 Aug 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
8.1.23, 9.0.16, 9.1.14, 10.0.11, 10.1.6, 10.2.2
Sources
NVD

Affected software

SoftwareAffected versions
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os
  • Version 10.2.2-h1
  • Version 10.2.2
  • From 10.2.0 before 10.2.2
  • Version 10.1.6-h3
All 16 release lines
  • From 8.1.0 before 8.1.23
  • Version 8.1.23
  • From 9.0.0 before 9.0.16
  • Version 9.0.16
  • Version 9.0.16-h2
  • From 9.1.0 before 9.1.14
  • Version 9.1.14
  • Version 9.1.14-h1
  • From 10.0.0 before 10.0.11
  • Version 10.0.11
  • From 10.1.0 before 10.1.6
  • Version 10.1.6
  • Version 10.1.6-h3
  • From 10.2.0 before 10.2.2
  • Version 10.2.2
  • Version 10.2.2-h1

Known exploited

CISA name
Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
Required action
Apply updates per vendor instructions.
Due for US agencies
12 Sept 2022
Used in ransomware
Not known

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-0028
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-0028