Intrusion PreventionIvanti.Connect.Secure.CVE-2025-0282.Buffer.Overflow
Description
This indicates an attack attempt to exploit a Buffer Overflow vulnerability in Ivanti Connect Secure.
The vulnerability is due to an improper boundary check in the application. A remote, unauthenticated attacker can exploit this to execute arbitrary code within the context of the application.
Affected Products
Ivanti Connect Secure before version 22.7R2.5
Ivanti Policy Secure before version 22.7R1.2
Ivanti Neurons for ZTA gateways before version 22.7R2.3
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283?language=en_US
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| ID | 57117 |
| Created | Jan 13, 2025 |
| Updated | Feb 04, 2025 |
| CVE ID | |
| Tags | Threat Signal |
| Risk |
|
| Known Exploited | Yes |
| Exploit Prediction Score | 94.13% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, MacOS |
| Affected App | Other |
| Profile Type | BufferErrors |