Research · Jan 8, 2025 · ZeroDay Catalog
Critical Stack-Based Buffer Overflow Vulnerability in Ivanti Products
A zero-day stack-based buffer overflow vulnerability has been identified in Ivanti's Connect Secure, Policy Secure, and ZTA Gateways, posing significant security risks.
What changed
A critical vulnerability, identified as CVE-2025-0282, has been discovered in Ivanti's Connect Secure, Policy Secure, and Neurons for Zero Trust Access (ZTA) gateways. This stack-based buffer overflow flaw allows unauthenticated attackers to execute arbitrary code, potentially leading to severe security breaches.
The vulnerability is categorized as a zero-day, meaning it is currently unpatched and poses an immediate risk to affected systems.
Who is affected
Organizations utilizing Ivanti's security solutions are at risk, particularly those relying on the following products:
The vulnerability impacts a wide range of users, including enterprises that have deployed these Ivanti products for secure access and policy enforcement.
- Ivanti Connect Secure (ICS)
- Ivanti Policy Secure (IPS)
- Neurons for Zero Trust Access (ZTA) gateways
- Any organization using these products for network security
What to do
Security teams should prioritize assessing their environments for the presence of Ivanti products and implement immediate measures to mitigate potential exploitation of this vulnerability.
It is crucial to monitor official channels for updates from Ivanti regarding patches or workarounds.
- Conduct an inventory of Ivanti products in use.
- Implement network segmentation to limit exposure.
- Monitor for unusual activity that may indicate exploitation attempts.
- Stay updated with advisories from Ivanti and relevant cybersecurity authorities.