VYPR
← All advisories
High severity7.0NVD Advisory· Published Jan 8, 2025· Updated Jun 17, 2026

CVE-2025-0283

CVE-2025-0283

Description

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges.

Affected products

88
  • Ivanti/Connect Secure54 versions
    cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*+ 53 more
    • cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*range: <9.1
    • cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r1.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r10:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r10.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r10.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r12:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r12.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r12.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r13:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r13.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r14:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r14.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r15:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r15.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r16:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r16.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r17:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r17.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r17.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r18:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r18.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r18.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r18.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r18.7:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r18.8:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r18.9:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:21.9:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:21.12:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.1:r6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1.5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.4:*:*:*:*:*:*
    • (no CPE)range: 22.7R2.5
    • (no CPE)range: <22.7R2.5
  • Ivanti/Neurons For Zero Trust Access25 versions
    cpe:2.3:a:ivanti:neurons_for_zero-trust_access:-:*:*:*:*:*:*:*+ 24 more
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:-:*:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.2:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.2:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.2:r5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.3:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.3:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.4:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.4:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.5:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.5:r1.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.6:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.6:r1.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.6:r1.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.6:r1.5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.6:r1.6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.6:r1.7:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r1.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r1.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r1.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r1.5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r1.6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.3:*:*:*:*:*:*
  • Ivanti/Policy Secure7 versions
    cpe:2.3:a:ivanti:policy_secure:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:ivanti:policy_secure:*:*:*:*:*:*:*:*range: <22.7
    • cpe:2.3:a:ivanti:policy_secure:22.7:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.7:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.7:r1.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.7:r1.2:*:*:*:*:*:*
    • (no CPE)range: 22.7R1.2
    • (no CPE)range: <22.7R1.2
  • Ivanti/Neurons for ZTA gatewayscpe-rescue2 versions
    22.7R2.5+ 1 more
    • (no CPE)range: 22.7R2.5
    • (no CPE)range: <22.7R2.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.