CVE-2025-0283
CVSS 3.1 Score 7 of 10 (high)
Details
Published Jan 8, 2025
Updated: Jan 14, 2025
CWE ID 787
CWE ID 121
Summary
CVE-2025-0283 is a recently disclosed vulnerability affecting Ivanti Connect Secure versions prior to 22.7R2.5, Ivanti Policy Secure versions before 22.7R1.2, and Ivanti Neurons for ZTA gateways up to version 22.7R2.3. This issue involves a stack-based buffer overflow, enabling a local authenticated attacker to escalate their privileges, potentially gaining administrative control over the affected system. Successful exploitation may lead to significant security implications, requiring immediate patching to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Ivanti Connect Secure
- Ivanti Policy Secure
- Ivanti Neurons For Zero-trust Access
Affected Vendors
- Ivanti