Security News > 2022 > August > CISA is warning of high-severity PAN-OS DDoS flaw used in attacks

The security issue is a high-severity risk identified as CVE-2022-0028 that allows a remote threat actor to deploy reflected and amplified denial-of-service attacks without having to authenticate.

While exploiting the flaw can only cause a DoS condition on the affected device, it has already been used for at least one attack.

A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service attacks.

The security policy on the firewall that allows traffic to pass from Zone A to Zone B includes a URL filtering profile with one or more blocked categories.

Packet-based attack protection is not enabled in a Zone Protection profile for Zone A, including both and.

The current catalog of Known Exploitable Vulnerabilities from CISA lists 802 security issues that organizations around the world could use to improve their defenses.

News URL

https://www.bleepingcomputer.com/news/security/cisa-is-warning-of-high-severity-pan-os-ddos-flaw-used-in-attacks/