Description
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Ivanti Connect Secure
Default version status: unaffected
22.7R2 to ≤ 22.7R2.4affected22.7R2.5unaffected
Ivanti Policy Secure
Default version status: unaffected
22.7R1 to ≤ 22.7R1.2affected
Ivanti Neurons for ZTA gateways
Default version status: unaffected
22.7R2 to ≤ 22.7R2.3affected22.7R2.5unaffected
References
- https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283 ↗
- https://labs.watchtowr.com/exploitation-walkthrough-and-techniques-ivanti-connect-secure-rce-cve-2025-0282/ ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0282 ↗
- https://github.com/sfewer-r7/CVE-2025-0282 ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-0282 ↗
- https://www.cisa.gov/cisa-mitigation-instructions-cve-2025-0282 ↗
- https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day ↗