CVE-2025-0282

🗓️ 08 Jan 2025 22:15:09Reported by ivantiType

cve🔗 web.nvd.nist.gov📰️ 59 Media mentions👁 903 Views🌐 WEB

Stack-based buffer overflow in Ivanti Connect Secure allows remote code execution by attackers.

Reporter	Title	Published	Views	Family All 76
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	22 Jan 202508:14	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	11 Jan 202502:06	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Ivanti Connect_Secure	24 Jul 202606:37	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	16 Jan 202514:45	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	22 Jan 202508:14	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	12 Jan 202511:58	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	7 Jun 202518:39	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	10 Mar 202521:33	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	15 Jan 202518:27	–	githubexploit
zdt	Ivanti Buffer Overflow Proof of Concept Exploit	16 Jan 202500:00	–	zdt

NVD

Vulners

Node

ivanti connect_secureMatch22.7r2

ivanti connect_secureMatch22.7r2.1

ivanti connect_secureMatch22.7r2.2

ivanti connect_secureMatch22.7r2.3

ivanti connect_secureMatch22.7r2.4

ivanti neurons_for_zero-trust_accessMatch22.7r2

ivanti neurons_for_zero-trust_accessMatch22.7r2.2

ivanti neurons_for_zero-trust_accessMatch22.7r2.3

ivanti policy_secureMatch22.7r1

ivanti policy_secureMatch22.7r1.1

ivanti policy_secureMatch22.7r1.2

[
  {
    "defaultStatus": "unaffected",
    "product": "Connect Secure",
    "vendor": "Ivanti",
    "versions": [
      {
        "lessThanOrEqual": "22.7R2.4",
        "status": "affected",
        "version": "22.7R2",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "22.7R2.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Policy Secure",
    "vendor": "Ivanti",
    "versions": [
      {
        "lessThanOrEqual": "22.7R1.2",
        "status": "affected",
        "version": "22.7R1",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Neurons for ZTA gateways",
    "vendor": "Ivanti",
    "versions": [
      {
        "lessThanOrEqual": "22.7R2.3",
        "status": "affected",
        "version": "22.7R2",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "22.7R2.5",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
forums	www.forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cisa	www.cisa.gov/cisa-mitigation-instructions-cve-2025-0282
github	www.github.com/sfewer-r7/CVE-2025-0282
labs	www.labs.watchtowr.com/exploitation-walkthrough-and-techniques-ivanti-connect-secure-rce-cve-2025-0282/
cloud	www.cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
type	query param	/dana-na/auth/url_admin/welcome.cgi	Version check endpoint used to determine vulnerable Ivanti Connect Secure versions (type inter)	CWE-121, CWE-787
X-Forwarded-For	header	/	Trigger occurs via crafted X-Forwarded-For header to exploit stack overflow	CWE-121, CWE-787

04 Aug 2026 05:16Current

8.3High risk

Vulners AI Score8.3

CVSS 3.19

EPSS0.99979

SSVC

buffer overflow remote code execution ivanti connect secure ivanti policy secure ivanti neurons security vulnerability