THREATOPS
THREAT OPSThreat News › [NVD] CVE-2025-0282 (CRITICAL 9.0) — A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

[NVD] CVE-2025-0282 (CRITICAL 9.0) — A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

lownvdPublished 2025-01-08

CVE-2025-0282 CVSS: 9.0 CRITICAL Published: 2025-01-08T23:15:09.763

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-0282