← CVE Radar
CVE-2025-22457Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.
9.8 CRITICALEPSS 99.98%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 9.0 | CRITICAL | 3.1ivanti (CNA) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H |
CISA required action
⚡ Known exploited · remediation due Apr 11, 2025
Apply mitigations as set forth in the CISA instructions linked below.
Details
- CVE ID
- CVE-2025-22457
- Status
- Analyzed
- Assigner (CNA)
- ivanti
- Published
- Apr 3, 2025
- Last modified
- 2026-08-04 05:16 UTC
Affected Products
As published by the CNA in the CVE record.
IvantiConnect Secure0 version ranges
No version detail published.
IvantiPolicy Secure0 version ranges
No version detail published.
IvantiNeurons for ZTA gateways0 version ranges
No version detail published.