CVE-2025-0282 Details
Description
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.
A stack-based buffer overflow vulnerability has been identified in Ivanti Connect Secure VPN appliances, as well as in Ivanti Policy Secure and Ivanti Neurons for ZTA gateways. This vulnerability is present in several different versions and can be exploited by a remote, unauthenticated attacker to achieve remote code execution. The root cause of the vulnerability lies in improper handling of the 'clientCapabilities' parameter, which allows for an out-of-bounds write that can be leveraged to execute arbitrary commands on the affected system.
Users are advised to upgrade to Ivanti Connect Secure version 22.7R2.5, Ivanti Policy Secure version 22.7R1.3, or Ivanti Neurons for ZTA Gateways version 22.8R2. For Ivanti Connect Secure, a factory reset is recommended before applying the update. After updating, continue to monitor the Integrity Checker Tool (ICT) for signs of compromise.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jan 8, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/sfewer-r7/CVE-2025-0282 | CISA-ADP | Exploit |
| https://labs.watchtowr.com/exploitation-walkthrough-and-techniques-ivanti-connect-secure-rce-cve-2025-0282/ | CISA-ADP | ExploitThird Party Advisory |
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-0282 | CISA-ADP | US Government Resource |
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0282 | CISA-ADP | US Government Resource |
| https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283 | ivanti | Vendor Advisory |
| https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day | CVE | ExploitTechnical Description |
| https://www.cisa.gov/cisa-mitigation-instructions-cve-2025-0282 | CVE | Third Party AdvisoryUS Government Resource |
This CVE is in CISA's Known Exploited Vulnerabilities Catalog
Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.
| Vulnerability Name | Date Added | Due Date | Required Action |
|---|---|---|---|
| Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | Jan 8, 2025 | Jan 15, 2025 | Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service. |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | [email protected] |
| CWE-121 | Stack-based Buffer Overflow | ivanti |
Affected Products
| Product | Versions |
|---|---|
| ivanti connect secure | 22.7 r2 22.7 r2.1 22.7 r2.2 22.7 r2.3 22.7 r2.4 |
CPE
Remediation
| |
| ivanti neurons for zero-trust access | 22.7 r2 22.7 r2.2 22.7 r2.3 |
CPE
Remediation
| |
| ivanti policy secure | 22.7 r1 22.7 r1.1 22.7 r1.2 |
CPE
Remediation
| |
Change History
14 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 4, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | ivanti |
| Oct 24, 2025 | Modified Analysis | [email protected] |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Mar 17, 2025 | Modified Analysis | [email protected] |
| Feb 20, 2025 | CVE Modified | CISA-ADP |
| Jan 28, 2025 | CVE Modified | CISA-ADP |
| Jan 14, 2025 | Initial Analysis | [email protected] |
| Jan 9, 2025 | CVE Modified | CVE |
| Jan 9, 2025 | CVE CISA KEV Update | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government |
| Jan 8, 2025 | New CVE Received | ivanti |