← CVE Radar
CVE-2025-0282Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.
9.0 CRITICALEPSS 99.98%⚡ Known Exploited (CISA KEV)NVD: Published
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.0 | CRITICAL | 3.1ivanti (CNA) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2025-0282
- Status
- Published
- Assigner (CNA)
- ivanti
- Published
- Jan 8, 2025
- Last modified
- 2026-10-01 18:13 UTC
- Weaknesses
- CWE-121 · Stack-based Buffer Overflow
Affected Products
As published by the CNA in the CVE record.
IvantiConnect Secure1 version range
- 22.7R2 through 22.7R2.4
IvantiPolicy Secure1 version range
- 22.7R1 through 22.7R1.2
IvantiNeurons for ZTA gateways1 version range
- 22.7R2 through 22.7R2.3
References
Sources
- NVD (unavailable at last refresh)
- CVE.org
- CISA KEV
- FIRST EPSS