(CVE-2022-0023) Palo Alto Networks PAN-OS DNS代理 输入验证漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://security.paloaltonetworks.com/CVE-2022-0023
• https://nvd.nist.gov/vuln/detail/CVE-2022-0023
• https://cve.imfht.com/detail/CVE-2022-0023?lang=en
• https://cve.cert.hr/cve/CVE-2022-0023
• https://www.hkcert.org/security-bulletin/palo-alto-pan-os-denial-of-service-vulnerability_20220811
• https://www.tenable.com/plugins/nessus/159713
• https://security.paloaltonetworks.com/?version=PAN-OS+10.0.8-h8&product=PAN-OS&sort=-date

Related Vulnerabilities

• Palo Alto Networks PAN-OS GlobalProtect /ssl-vpn/login.esp 权限绕过漏洞（CVE-2026-0257）
• Palo Alto Networks Expedition /API/regionsDiscovery.php 命令执行漏洞（CVE-2025-0107）
• Cambium Networks Canopy /login.cgi 默认口令漏洞
• （CVE-2025-4617）Palo Alto Networks Prisma Browser截图控制绕过漏洞
• （CVE-2025-4618）Palo Alto Networks Prisma Browser敏感信息泄露漏洞
• CVE-2023-20888: VMware Aria Operations for Networks - Remote Code Execution
• PoCCVE-2017-15944: Palo Alto Network PAN-OS - Remote Code Execution
• PoCCVE-2018-10141: Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Scripting
• PoCCVE-2020-2036: Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting
• PoCCVE-2023-20889: VMware Aria Operations for Networks - Code Injection Information Disclosure Vulnerability
• PoCCVE-2024-0012: PAN-OS Management Web Interface - Authentication Bypass
• PoCCVE-2024-9463: PaloAlto Networks Expedition - Remote Code Execution