GET DEMO
Back
GET DEMO
KEEPNET LABS > Blog > Palo Alto Networks Devices Running the PAN-OS Could Allow Attacker to Launch DoS Attack

Palo Alto Networks Devices Running the PAN-OS Could Allow Attacker to Launch DoS Attack

An incorrect setting in the PAN-OS URL filtering policy allows a network-based attacker to perform mirrored and amplified TCP DoS attacks. “When used improperly, this issue does not affect the confidentiality, integrity or availability of our products,” Palo Alto Networks says.

Palo Alto Networks Devices Running the PAN-OS Could Allow Attacker to Launch DoS Attack

A serious issue monitored as CVSS score 8.6 (CVE-2022-0028) on Palo Alto Networks devices running the PAN operating system could allow an attacker to launch a denial of service (DoS) attack. The problem arises because of the Palo Alto Networks firewall Pa series (hardware), VM series (virtual), and CN series (container) firewall against the target specified by the attacker. An incorrect setting has occurred in the PAN-OS URL filtering policy that allows a network-based attacker to perform mirrored and amplified TCP DoS attacks. “When used improperly, this issue does not affect the confidentiality, integrity, or availability of our products. However, the resulting denial of service (DoS) attack can help to hide the identity of the attacker and point to the firewall as the source of the attack, ” says the recommendation of Palo Alto Networks. Unaffectedcloud NGFWNoneAllPAN-Product status versions affected by OS 10.2<10.2. 2-h2 > = 10,2. 2-h2 (ETA: week beginning August 15, 2022) PAN-OS 10.1< 10.1. 6-h6 > = 10,1. 6-h6PAN-OS 10.0<10.0. 11-h1 > = 10.0. 11-h1 (ETA: week of August 15, 2022)PAN-OS 9.1< 9.1. 14-h4 > = 9,1. 14-h4 (ETA: week of August 15, 2022)PAN-OS 9.0< 9.0. 16-h3> = 9.0. 16-h3 (ETA: week until August 15, 2022)PAN-OS 8.1< 8.1. 23-h1 > = 8,1. 23-h1 (aankomst: 15 August 2022)prism Prisma Prisma Prisma 2.1 2.2 to 3.0 3.1 to access no access no access no access no software update is in order to Palo Alto Networks PAN-OS firewall configurations heeft een beveiligingsupdate uitgebracht om een beveiligingsupdate when kwetsbaarheid to Te Paki.

Keepnet Labs’ Threat Sharing Module: How to identify attackers in reconnaissance stage

Fewer and fewer businesses can protect themselves and the sensitive data under their control as a result of the rapid pace of digitalization, increased attack surfaces, and variety of vulnerabilities and attack methodologies. To stop the attacks, several successful and effective recent cyberattacks brought up the question of sharing threat intelligence once more. The government […]

The last hunt of social engineering: Uber

“Hi @here I announce I am a hacker and Uber has suffered a data breach” was the message that appeared in a channel on Uber’s Slack. After the message, the ride-share giant confirmed that it was responding to “a cybersecurity incident” in cooperation with law enforcement. An 18-year-old hacker reportedly took responsibility for the attack […]

Black Hat Fireside Chat: Deploying ‘AI’ as a weapon to win the ‘attack surface management’ war

An advanced weapon is emerging that uses data analysis to hone systems and suppress attacks. Darktrace's artificial intelligence solutions can help companies restrict access to APIs, neutralize shady IT, protect supply chains and even improve the efficiency of DEVSECOPYRIGHTs.

Join
Our Newsletter

Sign up to learn about the latest threats, hacking methods, and news.