Ivanti Releases Security Updates for Connect Secure, Policy Secure & ZTA Gateways Vulnerability (CVE-2025-22457)

🗓️ 04 Apr 2025 12:00:00Reported by CISAType

cisa

cisa🔗 www.cisa.gov👁 10 Views

Ivanti patches CVE-2025-22457 in Connect Secure, Policy Secure and ZTA Gateways; exploitation could grant control.

Reporter	Title	Published	Views	Family All 36
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	10 Apr 202503:27	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	25 May 202522:52	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Ivanti Connect_Secure	9 Jul 202623:05	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	9 Apr 202514:39	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	13 Jul 202510:43	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	8 Apr 202509:31	–	githubexploit
ATTACKERKB	CVE-2025-22457	3 Apr 202500:00	–	attackerkb
BDU FSTEC	The vulnerability of Ivanti Connect Secure, Ivanti Policy Secure, and ZTA Gateways’ network access control devices lies in buffer overflows in the stack, allowing attackers to execute arbitrary code.	4 Apr 202500:00	–	bdu_fstec
Circl	CVE-2025-22457	3 Apr 202514:22	–	circl
CISA KEV Catalog	Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability	4 Apr 202500:00	–	cisa_kev

Source	Link
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
ivanti	www.ivanti.com/blog/security-update-pulse-connect-secure-ivanti-connect-secure-policy-secure-and-neurons-for-zta-gateways
forums	www.forums.ivanti.com/s/article/April-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-22457
cloud	www.cloud.google.com/blog/topics/threat-intelligence/china-nexus-exploiting-critical-ivanti-vulnerability
ivanti	www.ivanti.com/blog/enhanced-external-integrity-checking-tool-to-provide-additional-visibility-and-protection-for-customers-against-evolving-threat-actor-techniques-in-relation-to-previously-disclosed-vulnerabilities
	[email protected]

04 Apr 2025 12:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.19 - 9.8

EPSS0.99979

SSVC

Ivanti vulnerability Connect Secure Policy Secure Zero Trust Gateways Exploitation risk Threat hunting Factory reset Patching guidance