VYPR
← All advisories
Critical severity9.0CISA KEVNVD Advisory· Published Jan 8, 2025· Updated Aug 4, 2026

CVE-2025-0282

CVE-2025-0282

Description

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • Ivanti/Connect Securecpe-rescue7 versions
    22.7R2+ 6 more
    • (no CPE)range: 22.7R2
    • (no CPE)range: <22.7R2.5
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.4:*:*:*:*:*:*
  • Ivanti/Policy Securecpe-rescue5 versions
    22.7R1+ 4 more
    • (no CPE)range: 22.7R1
    • (no CPE)range: <22.7R1.2
    • cpe:2.3:a:ivanti:policy_secure:22.7:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.7:r1.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.7:r1.2:*:*:*:*:*:*
  • Ivanti/Neurons for ZTA gatewayscpe-rescue2 versions
    22.7R2+ 1 more
    • (no CPE)range: 22.7R2
    • (no CPE)range: <22.7R2.3
  • Ivanti/Neurons For Zero Trust Access3 versions
    cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.3:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

6

News mentions

1