BaseFortify

Publication date: 2025-01-08

Last updated on: 2025-01-14

Assigner: ivanti

Description

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-01-08

Last Modified

2025-01-14

Generated

2026-10-23

AI Q&A

2025-01-14

EPSS Evaluated

2026-10-20

NVD

CVE-2025-0283

Affected Vendors & Products

Vendor	Product	Version / Range
ivanti	connect_secure	to 9.1 (exc)
ivanti	connect_secure	From 22.2 (inc) to 22.7 (exc)
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	9.1
ivanti	connect_secure	21.9
ivanti	connect_secure	21.12
ivanti	connect_secure	22.1
ivanti	connect_secure	22.1
ivanti	connect_secure	22.7
ivanti	connect_secure	22.7
ivanti	connect_secure	22.7
ivanti	connect_secure	22.7
ivanti	connect_secure	22.7
ivanti	connect_secure	22.7
ivanti	connect_secure	22.7
ivanti	connect_secure	22.7
ivanti	connect_secure	22.7
ivanti	connect_secure	22.7
ivanti	connect_secure	22.7
ivanti	connect_secure	22.7
ivanti	neurons_for_zero-trust_access	*
ivanti	neurons_for_zero-trust_access	22.2
ivanti	neurons_for_zero-trust_access	22.2
ivanti	neurons_for_zero-trust_access	22.2
ivanti	neurons_for_zero-trust_access	22.3
ivanti	neurons_for_zero-trust_access	22.3
ivanti	neurons_for_zero-trust_access	22.4
ivanti	neurons_for_zero-trust_access	22.4
ivanti	neurons_for_zero-trust_access	22.5
ivanti	neurons_for_zero-trust_access	22.5
ivanti	neurons_for_zero-trust_access	22.6
ivanti	neurons_for_zero-trust_access	22.6
ivanti	neurons_for_zero-trust_access	22.6
ivanti	neurons_for_zero-trust_access	22.6
ivanti	neurons_for_zero-trust_access	22.6
ivanti	neurons_for_zero-trust_access	22.6
ivanti	neurons_for_zero-trust_access	22.7
ivanti	neurons_for_zero-trust_access	22.7
ivanti	neurons_for_zero-trust_access	22.7
ivanti	neurons_for_zero-trust_access	22.7
ivanti	neurons_for_zero-trust_access	22.7
ivanti	neurons_for_zero-trust_access	22.7
ivanti	neurons_for_zero-trust_access	22.7
ivanti	neurons_for_zero-trust_access	22.7
ivanti	neurons_for_zero-trust_access	22.7
ivanti	policy_secure	to 22.7 (exc)
ivanti	policy_secure	22.7
ivanti	policy_secure	22.7
ivanti	policy_secure	22.7
ivanti	policy_secure	22.7

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability, identified as CVE-2025-0283, is a type of security flaw known as a stack-based buffer overflow. It affects certain versions of Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways. This flaw allows a local authenticated attacker to gain higher privileges than they should have, which means they could potentially access or control parts of the system that are normally restricted.

Impact Analysis

If you use any of the affected Ivanti products, this vulnerability could allow someone with access to your system to escalate their privileges. This means they could perform actions that they are not authorized to do, which could lead to unauthorized access to sensitive information or control over the system.

Hi! I’m here to help you understand CVE-2025-0283. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70