CVE-2025-0282

Analyzed Analyzed - Analysis Complete

BaseFortify

Publication date: 2025-01-08

Last updated on: 2026-10-01

Assigner: ivanti

Description

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-01-08

Last Modified

2026-10-01

Generated

2026-10-23

AI Q&A

2025-01-14

EPSS Evaluated

2026-10-20

NVD

CVE-2025-0282

Affected Vendors & Products

Vendor	Product	Version / Range
ivanti	connect_secure	22.7
ivanti	connect_secure	22.7
ivanti	connect_secure	22.7
ivanti	connect_secure	22.7
ivanti	connect_secure	22.7
ivanti	neurons_for_zero-trust_access	22.7
ivanti	neurons_for_zero-trust_access	22.7
ivanti	neurons_for_zero-trust_access	22.7
ivanti	policy_secure	22.7
ivanti	policy_secure	22.7
ivanti	policy_secure	22.7

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

CVE-2025-0282 is a serious security issue found in certain Ivanti products, which allows attackers to take control of a system without needing any authentication. This happens due to a flaw called a stack-based buffer overflow, which can let attackers run their own code on the affected devices.

Detection Guidance

You can detect this vulnerability by using the In-Build Integrity Checker Tool (ICT) to assess the integrity of your systems. Additionally, conduct threat hunting on any systems that are connected to or have recently connected to the affected Ivanti device.

Impact Analysis

If you use Ivanti Connect Secure, Policy Secure, or ZTA Gateways, this vulnerability could allow attackers to compromise your network. They could execute harmful actions, steal data, or install malicious software without your knowledge. This could lead to significant security breaches and loss of sensitive information.

Compliance Impact

Exploiting this vulnerability could lead to unauthorized access to sensitive data, which may violate regulations like GDPR and HIPAA that require strict data protection measures. If your systems are compromised, it could result in legal penalties and loss of trust from customers and clients.

Mitigation Strategies

If no compromise is detected, perform a factory reset of the device, apply the necessary patches, and monitor authentication services. If a compromise is detected, report the incident, disconnect affected devices, and reset all relevant passwords and keys.

Hi! I’m here to help you understand CVE-2025-0282. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70