CVE-2025-0282

Description

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

Scores

Weaknesses (CWE)

• CWE-121
• CWE-787

European references

• ENISA EUVD · EUVD-2025-1580
• GCVE · GCVE-0-2025-0282

CERT-FR advisories

• CERTFR-2025-AVI-0014 — Multiples vulnérabilités dans les produits Ivanti · cert.ssi.gouv.fr
• CERTFR-2025-ALE-001 — [MàJ] Vulnérabilité dans les produits Ivanti · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

• cpe:2.3:a:ivanti:connect_secure:22.7:r2:*:*:*:*:*:*
• cpe:2.3:a:ivanti:connect_secure:22.7:r2.1:*:*:*:*:*:*
• cpe:2.3:a:ivanti:connect_secure:22.7:r2.2:*:*:*:*:*:*
• cpe:2.3:a:ivanti:connect_secure:22.7:r2.3:*:*:*:*:*:*
• cpe:2.3:a:ivanti:connect_secure:22.7:r2.4:*:*:*:*:*:*
• cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2:*:*:*:*:*:*
• cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.2:*:*:*:*:*:*
• cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.3:*:*:*:*:*:*
• cpe:2.3:a:ivanti:policy_secure:22.7:r1:*:*:*:*:*:*
• cpe:2.3:a:ivanti:policy_secure:22.7:r1.1:*:*:*:*:*:*
• cpe:2.3:a:ivanti:policy_secure:22.7:r1.2:*:*:*:*:*:*

Affected products

References

• https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283
• https://labs.watchtowr.com/exploitation-walkthrough-and-techniques-ivanti-connect-secure-rce-cve-2025-0282/
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0282
• https://github.com/sfewer-r7/CVE-2025-0282
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-0282
• https://www.cisa.gov/cisa-mitigation-instructions-cve-2025-0282
• https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day

Sources