A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is in the KEV database since Jan. 8, 2025.

The EPSS score is 0.94134.

Exploitation active

Automatable yes

Technical Impact total

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Ivanti Connect Secure unaffected
Version Status Constraints
22.7R2 affected
≤ 22.7R2.4
22.7R2.5 unaffected
—
Ivanti Policy Secure unaffected
Version Status Constraints
22.7R1 affected
≤ 22.7R1.2
Ivanti Neurons for ZTA gateways unaffected
Version Status Constraints
22.7R2 affected
≤ 22.7R2.3
22.7R2.5 unaffected
—

Configuration 1 [-]

OR cpe:2.3:a:ivanti:connect_secure:22.7:r2:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2.1:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2.2:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2.3:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2.4:*:*:*:*:*:*
cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2:*:*:*:*:*:*
cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.2:*:*:*:*:*:*
cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.3:*:*:*:*:*:*
cpe:2.3:a:ivanti:policy_secure:22.7:r1:*:*:*:*:*:*
cpe:2.3:a:ivanti:policy_secure:22.7:r1.1:*:*:*:*:*:*
cpe:2.3:a:ivanti:policy_secure:22.7:r1.2:*:*:*:*:*:*

No data.

No data.

Subscriptions

Vendors Products
Ivanti Subscribe
Connect Secure Subscribe
Neurons For Zero-trust Access Subscribe
Policy Secure Subscribe

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day cve-icon
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283 cve-icon cve-icon
https://github.com/sfewer-r7/CVE-2025-0282 cve-icon cve-icon
https://labs.watchtowr.com/exploitation-walkthrough-and-techniques-ivanti-connect-secure-rce-cve-2025-0282/ cve-icon cve-icon
https://www.cisa.gov/cisa-mitigation-instructions-cve-2025-0282 cve-icon
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-0282 cve-icon cve-icon
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0282 cve-icon cve-icon
History

Tue, 21 Oct 2025 23:30:00 +0000

Type Values Removed Values Added
References

Tue, 21 Oct 2025 20:30:00 +0000

Type Values Removed Values Added
References

Tue, 21 Oct 2025 19:30:00 +0000

Type Values Removed Values Added
References

Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.93244}

 epss

{'score': 0.93392}

Thu, 20 Feb 2025 23:45:00 +0000

Type Values Removed Values Added
References

Tue, 28 Jan 2025 17:15:00 +0000

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

 ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 14 Jan 2025 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Ivanti
Ivanti connect Secure
Ivanti neurons For Zero-trust Access
Ivanti policy Secure
Weaknesses CWE-787
CPEs cpe:2.3:a:ivanti:connect_secure:22.7:r2.1:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2.2:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2.3:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2.4:*:*:*:*:*:*
cpe:2.3:a:ivanti:connect_secure:22.7:r2:*:*:*:*:*:*
cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.2:*:*:*:*:*:*
cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.3:*:*:*:*:*:*
cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2:*:*:*:*:*:*
cpe:2.3:a:ivanti:policy_secure:22.7:r1.1:*:*:*:*:*:*
cpe:2.3:a:ivanti:policy_secure:22.7:r1.2:*:*:*:*:*:*
cpe:2.3:a:ivanti:policy_secure:22.7:r1:*:*:*:*:*:*
Vendors & Products Ivanti
Ivanti connect Secure
Ivanti neurons For Zero-trust Access
Ivanti policy Secure

Thu, 09 Jan 2025 22:45:00 +0000

Type Values Removed Values Added
References

Thu, 09 Jan 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2025-01-08'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 08 Jan 2025 22:30:00 +0000

Type Values Removed Values Added
Description A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: ivanti

Published:

Updated: 2025-10-21T22:55:33.039Z

Reserved: 2025-01-06T16:53:11.204Z

Link: CVE-2025-0282

cve-icon Vulnrichment

Updated: 2025-01-09T21:45:22.375Z

cve-icon NVD

Status : Analyzed

Published: 2025-01-08T23:15:09.763

Modified: 2025-10-24T13:54:58.783

Link: CVE-2025-0282

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses