Home

Description

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

PUBLISHED Reserved 2025-01-06 | Published 2025-01-08 | Updated 2025-10-21 | Assigner ivanti




CRITICAL: 9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA Known Exploited Vulnerability

Date added 2025-01-08 | Due date 2025-01-15

Known Ransomware Campaign(s)  

Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service.

Problem types

CWE-121: Stack-based Buffer Overflow

Product status

Default status
unaffected

22.7R2 (custom)
affected

22.7R2.5 (custom)
unaffected

Default status
unaffected

22.7R1 (custom)
affected

Default status
unaffected

22.7R2 (custom)
affected

22.7R2.5 (custom)
unaffected

References

labs.watchtowr.com/...anti-connect-secure-rce-cve-2025-0282/ third-party-advisory

www.cisa.gov/...es-catalog?search_api_fulltext=CVE-2025-0282 government-resource

github.com/sfewer-r7/CVE-2025-0282 exploit

www.cisa.gov/...nerabilities-catalog?field_cve=CVE-2025-0282 government-resource

www.cisa.gov/cisa-mitigation-instructions-cve-2025-0282

cloud.google.com/...gence/ivanti-connect-secure-vpn-zero-day

forums.ivanti.com/...TA-Gateways-CVE-2025-0282-CVE-2025-0283

cve.org (CVE-2025-0282)

nvd.nist.gov (CVE-2025-0282)

Download JSON