Intrusion PreventionIvanti.Connect.Secure.CVE-2025-22457.Buffer.Overflow
Description
This indicates an attack attempt to exploit a Buffer Overflow vulnerability in Ivanti Connect Secure.
The vulnerability is due to an improper boundary check in the application. A remote, unauthenticated attacker can exploit this to execute arbitrary code within the context of the application.
Affected Products
Ivanti Connect Secure before version 22.7R2.6
Ivanti Policy Secure before version 22.7R1.4
Ivanti ZTA Gateways before version 22.8R2.2
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://forums.ivanti.com/s/article/April-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-22457
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| ID | 57701 |
| Created | Apr 07, 2025 |
| Updated | Apr 22, 2025 |
| CVE ID | |
| Tags | Threat Signal |
| Risk |
|
| Known Exploited | Yes |
| Exploit Prediction Score | 53.66% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, MacOS |
| Affected App | Other |
| Profile Type | Buffer Errors |