Critical Β· published April 3, 2025
CVSS calls it critical at 9.0. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.
π¨ An unauthenticated attacker can execute remote code on Ivanti Connect Secure and related products with shocking ease! π₯ Think of it like a well-guarded library where a misplaced book can let anyone sneak in and rewrite the entire catalog β that's how this buffer overflow works, letting attackers slip in unchecked and take control. An attacker could exploit this vulnerability to run malicious code on the affected systems, potentially gaining full control over sensitive data and network resources. The ramifications could be absolutely devastating, with unauthorized access leading to data breaches or system compromise. This is a critical situation that needs immediate attention!
Think of it like a well-guarded library where a misplaced book can let anyone sneak in and rewrite the entire catalog β that's how this buffer overflow works, letting attackers slip in unchecked and take control. This stack-based buffer overflow vulnerability allows a remote unauthenticated attacker to inject and execute arbitrary code in the Ivanti software, affecting versions before 22.7R2.6, 22.7R1.4, and 22.8R2.2.
An attacker could exploit this vulnerability to run malicious code on the affected systems, potentially gaining full control over sensitive data and network resources. The ramifications could be absolutely devastating, with unauthorized access leading to data breaches or system compromise. This is a critical situation that needs immediate attention! Urgently update all affected Ivanti products to the latest versions: 22.7R2.6, 22.7R1.4, and 22.8R2.2. Additionally, consider implementing additional network segmentation to protect vulnerable systems during your update process. Regularly audit your configurations to minimize exposure. You've got this! Follow these steps to lock down your systems and reclaim your security hero status! π‘οΈ
| Product | Versions | Fixed in |
|---|---|---|
| ivanti/connect_secure | < 22.7 | 22.7 |
| ivanti/connect_secure | all versions | β |
| ivanti/connect_secure | all versions | β |
| ivanti/connect_secure | all versions | β |
| ivanti/connect_secure | all versions | β |
| ivanti/connect_secure | all versions | β |
| ivanti/connect_secure | all versions | β |
| ivanti/connect_secure | all versions | β |
| ivanti/connect_secure | all versions | β |
| ivanti/connect_secure | all versions | β |
| ivanti/connect_secure | all versions | β |
| ivanti/connect_secure | all versions | β |
| ivanti/connect_secure | all versions | β |
| ivanti/connect_secure | all versions | β |
| ivanti/policy_secure | < 22.7 | 22.7 |
| ivanti/policy_secure | all versions | β |
| ivanti/policy_secure | all versions | β |
| ivanti/policy_secure | all versions | β |
| ivanti/policy_secure | all versions | β |
| ivanti/policy_secure | all versions | β |
| ivanti/zero_trust_access_gateway | < 22.8 | 22.8 |
| ivanti/zero_trust_access_gateway | all versions | β |
| ivanti/zero_trust_access_gateway | all versions | β |