by Kastro
Paper/Archive/CVE-2025-0282

CVE-2025-0282

Ivanti Connect Secure — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

KEV · due 15 Janransomware useEPSS 100%public exploitSSVC actCVSS 9.0
critical.is priorityof 100
97
CVSS 9.0 (CNA, NVD agree)9.0 / 10 × 3027.0In CISA KEV+3030.0EPSS percentile 100.01.000 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

Affected

ProductAffectedFixed inSource
Connect Secure22.7R2 – 22.7R2.422.7R2.5CNA
Policy Secure22.7R1 – 22.7R1.2–CNA
Neurons for ZTA gateways22.7R2 – 22.7R2.322.7R2.5CNA

Scores by source

ivanti (CNA)9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
NVD9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: no · Technical impact: total

References

refforums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283writeuplabs.watchtowr.com/exploitation-walkthrough-and-techniques-ivanti-connect-secure-rce-cve-2025-0282refcisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0282exploitgithub.com/sfewer-r7/CVE-2025-0282refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-0282refcisa.gov/cisa-mitigation-instructions-cve-2025-0282refcloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-daykevcisa.gov/known-exploited-vulnerabilities-catalog