August 22, 2022 · Applied Cybernetics Group
CVE-2022-0028 — Palo Alto Networks PAN-OS
Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
- Added to KEV
2022-08-22- Federal due date
2022-09-12- Vendor
- Palo Alto Networks
- Product
- PAN-OS
- EPSS
- 78.9th percentile (score 0.020, as of
2026-07-13) - NVD CVSS v3.1
- —
- Ransomware use
- Unknown
- ATT&CK
- T1190 , T1498 · signal rollup
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2022-0028
CISA short description
A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks.
Required action
Apply updates per vendor instructions.