Microsoft Exchange zero-day 2022

[JiaXiang]

According to below link Microsoft Exchange have expose to new vulnerability again . I am using Palo Alto firewall PAN-OS 9.1.14 may I know Palo Alto firewall is able to detect this vulnerability ? and where to check it since I do not have CVE number. 

New Microsoft Exchange zero-day actively exploited in attacks (bleepingcomputer.com)

Warning: New attack campaign utilized a new 0-day RCE vulnerability on Microsoft Exchange Server | B...

[ymiyashita]

Currently, Palo Alto Networks is researching on the vulnerability. There's no signature available yet.

For your reference: "A vulnerability/CVE is released; when will the vulnerability signature[IPS] be released? Why do some CVEs not have vulnerability signatures? What is default action?"
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAOnCAO

When there's an update, I can share the status here.

[Mikeya.Herbert]

I check the portal site; however, nothing is public as of yet. Any update on the signature release?

[ymiyashita · Accepted solution]

Here is the KB article for the vulnerabilities (CVE-2022-41040 and CVE-2022-41082). When there's an update on the signature coverage, the KB will also be updated.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sZK9CAM

[ymiyashita · Accepted solution]

A signature (TID:91368) for CVE-2022-41040 was released in the content version 8624.
Based on our research, blocking CVE-2022-41040 can be the mitigation of CVE-2022-41082.

Unit42 also published a blog:
https://unit42.paloaltonetworks.com/proxynotshell-cve-2022-41040-cve-2022-41082/