Critical · published January 9, 2025
CVSS calls it critical at 9.0. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.
🚨 Unauthenticated attackers can leverage a stack-based buffer overflow in Ivanti Connect Secure, and a single request is all it takes for full remote code execution! 🔥 Think of it as a restaurant where the front door is wide open and anyone can stroll in without being checked. Once inside, they can grab the chef's secrets and whip up whatever chaos they desire! This vulnerability is absolutely devastating — attackers could potentially gain control over your server, read sensitive data, change configurations, or even delete crucial files. The implications for your organization could be catastrophic, leading to data breaches and loss of trust. 🔥
Think of it as a restaurant where the front door is wide open and anyone can stroll in without being checked. Once inside, they can grab the chef's secrets and whip up whatever chaos they desire! This stack-based buffer overflow allows remote unauthenticated attackers to send specially crafted requests to Ivanti devices, resulting in arbitrary code execution. The vulnerable versions are Ivanti Connect Secure prior to 22.7R2.5, Policy Secure before 22.7R1.2, and Neurons for ZTA gateways before 22.7R2.3.
This vulnerability is absolutely devastating — attackers could potentially gain control over your server, read sensitive data, change configurations, or even delete crucial files. The implications for your organization could be catastrophic, leading to data breaches and loss of trust. 🔥 Immediately patch your systems to the latest versions: 22.7R2.5 for Connect Secure, 22.7R1.2 for Policy Secure, and 22.7R2.3 for Neurons. Additionally, review firewall settings to restrict access until updates are applied. Don't wait — protect your environment now! 🛡️ You've got this! Follow these steps, and you'll fortify your defenses in no time! 💪✨
| Product | Versions | Fixed in |
|---|---|---|
| ivanti/connect_secure | all versions | — |
| ivanti/connect_secure | all versions | — |
| ivanti/connect_secure | all versions | — |
| ivanti/connect_secure | all versions | — |
| ivanti/connect_secure | all versions | — |
| ivanti/neurons_for_zero-trust_access | all versions | — |
| ivanti/neurons_for_zero-trust_access | all versions | — |
| ivanti/neurons_for_zero-trust_access | all versions | — |
| ivanti/policy_secure | all versions | — |
| ivanti/policy_secure | all versions | — |
| ivanti/policy_secure | all versions | — |