Summary
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Ivanti Connect Secure ausnutzen, um beliebigen Programmcode auszuführen.
Product
Connect Secure bietet TLS- und mobile VPN-Lösungen.
Vulnerabilities 1
-
Critical 9.0
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.…
KEV Apr 4, 2025
Revision history
-
#1
Initiale Fassung
References
-
Ivanti Security Advisory vom 2025-04-03
https://www.ivanti.com/blog/security-update-pulse-connect-secure-ivanti-connect-secure-policy-secure-and-neurons-for-zta-gateways
-
Rapid 7 Blog Post
https://www.rapid7.com/blog/post/2025/04/03/etr-ivanti-connect-secure-cve-2025-22457-exploited-in-the-wild/
-
Ivanti Security Advisory vom 2025-04-03
https://forums.ivanti.com/s/article/April-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-22457
-
Mandiant Incident Response
https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-exploiting-critical-ivanti-vulnerability