CVE-2025-0282

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-0282
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

9.0 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283 Vendor Advisory
https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day Exploit Technical Description
https://www.cisa.gov/cisa-mitigation-instructions-cve-2025-0282 Third Party Advisory US Government Resource
https://github.com/sfewer-r7/CVE-2025-0282 Exploit
https://labs.watchtowr.com/exploitation-walkthrough-and-techniques-ivanti-connect-secure-rce-cve-2025-0282/ Exploit Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0282 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ivanti:connect_secure:22.7:r2:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2.1:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2.2:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2.3:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2.4:*:*:*:*:*:*
cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2:*:*:*:*:*:*
cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.2:*:*:*:*:*:*
cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.3:*:*:*:*:*:*
cpe:2.3:a:ivanti:policy_secure:22.7:r1:*:*:*:*:*:*
cpe:2.3:a:ivanti:policy_secure:22.7:r1.1:*:*:*:*:*:*
cpe:2.3:a:ivanti:policy_secure:22.7:r1.2:*:*:*:*:*:*
History

17 Mar 2025, 19:24

Type Values Removed Values Added
References () https://github.com/sfewer-r7/CVE-2025-0282 - () https://github.com/sfewer-r7/CVE-2025-0282 - Exploit
References () https://labs.watchtowr.com/exploitation-walkthrough-and-techniques-ivanti-connect-secure-rce-cve-2025-0282/ - () https://labs.watchtowr.com/exploitation-walkthrough-and-techniques-ivanti-connect-secure-rce-cve-2025-0282/ - Exploit, Third Party Advisory
References () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0282 - () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0282 - Third Party Advisory, US Government Resource

20 Feb 2025, 23:15

Type Values Removed Values Added
References
  • {'url': 'https://www.synacktiv.com/sites/default/files/2024-01/synacktiv-pulseconnectsecure-multiple-vulnerabilities.pdf', 'source': '134c704f-9b21-4f2e-91b3-4a467353bcc0'}

28 Jan 2025, 17:15

Type Values Removed Values Added
References
  • () https://github.com/sfewer-r7/CVE-2025-0282 -
  • () https://labs.watchtowr.com/exploitation-walkthrough-and-techniques-ivanti-connect-secure-rce-cve-2025-0282/ -
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0282 -
  • () https://www.synacktiv.com/sites/default/files/2024-01/synacktiv-pulseconnectsecure-multiple-vulnerabilities.pdf -

14 Jan 2025, 15:59

Type Values Removed Values Added
References () https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283 - () https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283 - Vendor Advisory
References () https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day - () https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day - Exploit, Technical Description
References () https://www.cisa.gov/cisa-mitigation-instructions-cve-2025-0282 - () https://www.cisa.gov/cisa-mitigation-instructions-cve-2025-0282 - Third Party Advisory, US Government Resource
CPE cpe:2.3:a:ivanti:connect_secure:22.7:r2.3:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2.2:*:*:*:*:*:*
cpe:2.3:a:ivanti:policy_secure:22.7:r1.2:*:*:*:*:*:*
cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2:*:*:*:*:*:*
cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.2:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2.4:*:*:*:*:*:*
cpe:2.3:a:ivanti:policy_secure:22.7:r1.1:*:*:*:*:*:*
cpe:2.3:a:ivanti:policy_secure:22.7:r1:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2.1:*:*:*:*:*:*
cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.3:*:*:*:*:*:*
First Time Ivanti neurons For Zero-trust Access
Ivanti policy Secure
Ivanti
Ivanti connect Secure
CWE CWE-787

09 Jan 2025, 22:15

Type Values Removed Values Added
Summary
  • (es) Un desbordamiento de búfer basado en pila en Ivanti Connect Secure anterior a la versión 22.7R2.5, Ivanti Policy Secure anterior a la versión 22.7R1.2 e Ivanti Neurons para puertas de enlace ZTA anteriores a la versión 22.7R2.3 permite que un atacante remoto no autenticado logre la ejecución remota de código.
References
  • () https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day -
  • () https://www.cisa.gov/cisa-mitigation-instructions-cve-2025-0282 -

08 Jan 2025, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-08 23:15

Updated : 2025-03-17 19:24

NVD link : CVE-2025-0282

Mitre link : CVE-2025-0282

CVE.ORG link : CVE-2025-0282

JSON object : View

Products Affected

ivanti

  • neurons_for_zero-trust_access
  • connect_secure
  • policy_secure
CWE
CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write