Vulnerabilities CVE-2025-0282

CVE-2025-0282

Critical

Open

KEV

TLP:CLEAR

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

Details

CVSS Score: 9.0
EPSS Score ⓘ: 99.97%

100th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Confidence: 100%
Published: Jan 8, 2025
Last Modified: Aug 4, 2026
CISA KEV
Date Added: Jan 8, 2025
Patch Due: Jan 15, 2025
Required Action: Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.