CVE-2025-22457KEV Β· OVERDUECWE-121CWE-787

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Critical Β· published April 3, 2025

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 9.0. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.

561
days past CISA
deadline
CVSS v3.1
9.0
EPSS
100%
Percentile
100.0
In the wild
Confirmed
What it is

🚨 An unauthenticated attacker can execute remote code on Ivanti Connect Secure and related products with shocking ease! πŸ”₯ Think of it like a well-guarded library where a misplaced book can let anyone sneak in and rewrite the entire catalog β€” that's how this buffer overflow works, letting attackers slip in unchecked and take control. An attacker could exploit this vulnerability to run malicious code on the affected systems, potentially gaining full control over sensitive data and network resources. The ramifications could be absolutely devastating, with unauthorized access leading to data breaches or system compromise. This is a critical situation that needs immediate attention!

Put simply

Think of it like a well-guarded library where a misplaced book can let anyone sneak in and rewrite the entire catalog β€” that's how this buffer overflow works, letting attackers slip in unchecked and take control. This stack-based buffer overflow vulnerability allows a remote unauthenticated attacker to inject and execute arbitrary code in the Ivanti software, affecting versions before 22.7R2.6, 22.7R1.4, and 22.8R2.2.

What to do

An attacker could exploit this vulnerability to run malicious code on the affected systems, potentially gaining full control over sensitive data and network resources. The ramifications could be absolutely devastating, with unauthorized access leading to data breaches or system compromise. This is a critical situation that needs immediate attention! Urgently update all affected Ivanti products to the latest versions: 22.7R2.6, 22.7R1.4, and 22.8R2.2. Additionally, consider implementing additional network segmentation to protect vulnerable systems during your update process. Regularly audit your configurations to minimize exposure. You've got this! Follow these steps to lock down your systems and reclaim your security hero status! πŸ›‘οΈ

The record
Technical detail
CVSS v3.1
9.0 Β· CRITICAL
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.99981 Β· 100.0th percentile
Weaknesses
CWE-121 Β· Stack-based Buffer Overflow; CWE-787 Β· Out-of-bounds Write
Published
2025-04-03T20:15Z
KEV added
2025-04-04 Β· due 2025-04-11
Affected products (23)
ProductVersionsFixed in
ivanti/connect_secure< 22.722.7
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/policy_secure< 22.722.7
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/zero_trust_access_gateway< 22.822.8
ivanti/zero_trust_access_gatewayall versionsβ€”
ivanti/zero_trust_access_gatewayall versionsβ€”
References (2)
EPSS history
Timeline
  • 04 APR 00:00Z
    Added to CISA KEV β€” remediate by Apr 11
    kev
  • 03 APR 15:20Z
    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before…
    cvelistv5