9.0
Critique
Exploitée
· rançongiciel
CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply mitigations as set forth in the CISA instructions linked below.
Campagnes de rançongiciel
Utilisation connue
Faiblesse
CWE-121
Description
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Connect Secure 22.7 | premières → < 22.7R2.6 | 22.7R2.6 |
| Policy Secure 22.7 | premières → < 22.7R1.4 | 22.7R1.4 |
| Neurons for ZTA gateways 22.8 | premières → < 22.8R2.2 | 22.8R2.2 |
Références
- forums.ivanti.com forums.ivanti.com
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de Connect Secure
Les 65 CVE de Connect Secure →
CVE-2026-118527
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
4.3
Moyenne
CVE-2026-111357
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
7.0
Élevée
CVE-2026-104935
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
8.6
Élevée
CVE-2025-55144
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti…
5.4
Moyenne