VYPR
← All advisories
Critical severity9.0CISA KEVNVD Advisory· Published Apr 3, 2025· Updated Aug 4, 2026

CVE-2025-22457

CVE-2025-22457

Description

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

29
  • Ivanti/Connect Secure16 versions
    cpe:2.3:a:ivanti:connect_secure:*:-:*:*:*:*:*:*+ 15 more
    • cpe:2.3:a:ivanti:connect_secure:*:-:*:*:*:*:*:*range: <22.7
    • cpe:2.3:a:ivanti:connect_secure:22.7:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1.5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2:*:*:*:*:*:*
    • (no CPE)range: <22.7R2.6
    • (no CPE)range: 22.7R2.6
  • Ivanti/Policy Secure8 versions
    cpe:2.3:a:ivanti:policy_secure:*:-:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:ivanti:policy_secure:*:-:*:*:*:*:*:*range: <22.7
    • cpe:2.3:a:ivanti:policy_secure:22.7:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.7:r1.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.7:r1.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.7:r1.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.7:r1:*:*:*:*:*:*
    • (no CPE)range: <22.7R1.4
    • (no CPE)range: 22.7R1.4
  • Ivanti/Zero Trust Access Gateway3 versions
    cpe:2.3:a:ivanti:zero_trust_access_gateway:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ivanti:zero_trust_access_gateway:*:*:*:*:*:*:*:*range: <22.8
    • cpe:2.3:a:ivanti:zero_trust_access_gateway:22.8:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:zero_trust_access_gateway:22.8:r2.1:*:*:*:*:*:*
  • Ivanti/ZTA Gatewayllm-fuzzy
    Range: <22.8R2.2
  • Ivanti/Neurons for ZTA gatewayscpe-rescue
    Range: 22.8R2.2

Patches

Vulnerability mechanics

References

2

News mentions

1