VYPR
← All advisories
Critical severity9.0CISA KEVNVD Advisory· Published Jan 8, 2025· Updated Aug 4, 2026

CVE-2025-0282

CVE-2025-0282

Description

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • Ivanti/Connect Secure7 versions
    cpe:2.3:a:ivanti:connect_secure:22.7:r2.1:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2:*:*:*:*:*:*
    • (no CPE)range: <22.7R2.5
    • (no CPE)range: 22.7R2
  • Ivanti/Neurons For Zero Trust Access3 versions
    cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.2:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2:*:*:*:*:*:*
  • Ivanti/Policy Secure5 versions
    cpe:2.3:a:ivanti:policy_secure:22.7:r1.1:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ivanti:policy_secure:22.7:r1.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.7:r1.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.7:r1:*:*:*:*:*:*
    • (no CPE)range: <22.7R1.2
    • (no CPE)range: 22.7R1
  • Ivanti/Neurons for ZTA gatewaysllm-fuzzy2 versions
    <22.7R2.3+ 1 more
    • (no CPE)range: <22.7R2.3
    • (no CPE)range: 22.7R2

Patches

Vulnerability mechanics

References

6

News mentions

1