Firetruck

CVE-2022-0028

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Cloud NGFWPalo Alto Networks / Cloud NGFWAllunaffected
pan-ospaloaltonetworks / pan-os>= 10.0.0, < 10.0.11-h1affected
pan-ospaloaltonetworks / pan-os>= 10.1.0, < 10.1.6-h6affected
pan-ospaloaltonetworks / pan-os>= 10.2.0, < 10.2.2-h2affected
pan-ospaloaltonetworks / pan-os>= 8.1.0, < 8.1.23-haffected
pan-ospaloaltonetworks / pan-os>= 9.0.0, < 9.0.16-h3affected
pan-ospaloaltonetworks / pan-os>= 9.1.0, < 9.1 < 9.1.14-h4affected
PAN-OSPalo Alto Networks / PAN-OS>= 10.0, < 10.0.11-h1affected
PAN-OSPalo Alto Networks / PAN-OS>= 10.1, < 10.1.6-h6affected
PAN-OSPalo Alto Networks / PAN-OS>= 10.2, < 10.2.2-h2affected
PAN-OSPalo Alto Networks / PAN-OS>= 8.1, < 8.1.23-h1affected
PAN-OSPalo Alto Networks / PAN-OS>= 9.0, < 9.0.16-h3affected
PAN-OSPalo Alto Networks / PAN-OS>= 9.1, < 9.1.14-h4affected
Prisma AccessPalo Alto Networks / Prisma Access2.1 Allunaffected
Prisma AccessPalo Alto Networks / Prisma Access2.2 Allunaffected
Prisma AccessPalo Alto Networks / Prisma Access3.0 Allunaffected
Prisma AccessPalo Alto Networks / Prisma Access3.1 Allunaffected