Ivanti Connect Secure / Policy Secure / ZTA Gateways Remote Code Execution

🗓️ 11 Apr 2025 00:00:00Reported by sfewer-r7Type

packetstormnews

packetstormnews🔗 packetstorm.news👁 6 Views

PoC for stack overflow enabling remote code execution in Ivanti products before given versions.

Reporter	Title	Published	Views	Family All 36
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	10 Apr 202503:27	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	25 May 202522:52	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Ivanti Connect_Secure	9 Jul 202623:05	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	9 Apr 202514:39	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	13 Jul 202510:43	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	8 Apr 202509:31	–	githubexploit
ATTACKERKB	CVE-2025-22457	3 Apr 202500:00	–	attackerkb
BDU FSTEC	The vulnerability of Ivanti Connect Secure, Ivanti Policy Secure, and ZTA Gateways’ network access control devices lies in buffer overflows in the stack, allowing attackers to execute arbitrary code.	4 Apr 202500:00	–	bdu_fstec
Circl	CVE-2025-22457	3 Apr 202514:22	–	circl
CISA KEV Catalog	Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability	4 Apr 202500:00	–	cisa_kev

11 Apr 2025 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.19 - 9.8

EPSS0.99979

remote code execution stack overflow ivanti connect secure ivanti policy secure ivanti zta gateways