CISA Adds One Vulnerability to the KEV Catalog

🗓️ 08 Jan 2025 12:00:00Reported by CISAType

cisa🔗 www.cisa.gov👁 30 Views

CISA adds Ivanti Connect Secure vulnerability to Known Exploited Vulnerabilities Catalog, urges mitigations.

Reporter	Title	Published	Views	Family All 76
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	22 Jan 202508:14	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	11 Jan 202502:06	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Ivanti Connect_Secure	24 Jul 202606:37	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	16 Jan 202514:45	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	22 Jan 202508:14	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	12 Jan 202511:58	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	7 Jun 202518:39	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	10 Mar 202521:33	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	15 Jan 202518:27	–	githubexploit
zdt	Ivanti Buffer Overflow Proof of Concept Exploit	16 Jan 202500:00	–	zdt

Source	Link
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cve	www.cve.org/CVERecord
forums	www.forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283
cisa	www.cisa.gov/cisa-mitigation-instructions-cve-2025-0282
cisa	www.cisa.gov/binding-operational-directive-22-01
cisa	www.cisa.gov/sites/default/files/publications/Reducing_the_Significant_Risk_of_Known_Exploited_Vulnerabilities_211103.pdf
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cisa	www.cisa.gov/known-exploited-vulnerabilities

08 Jan 2025 12:00Current

9.2High risk

Vulners AI Score9.2

CVSS 3.19

EPSS0.99979

SSVC

cisa vulnerability ivanti connect secure known exploited vulnerabilities cyber threats remediation actions federal enterprise.