Vulnerabilities CVE-2025-22457

CVE-2025-22457

Critical

Open

KEV

TLP:CLEAR

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

Details

CVSS Score: 9.0
EPSS Score ⓘ: 99.99%

100th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Confidence: 100%
Published: Apr 3, 2025
Last Modified: Aug 4, 2026
CISA KEV
Date Added: Apr 4, 2025
Patch Due: Apr 11, 2025
Required Action: Apply mitigations as set forth in the CISA instructions linked below.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.