Research · Jan 8, 2025
Critical Buffer Overflow Vulnerability Discovered in Ivanti Products
A newly identified stack-based buffer overflow vulnerability in Ivanti's Connect Secure, Policy Secure, and ZTA Gateways poses significant security risks, allowing potential unauthorized code execution.
What changed
A zero-day vulnerability has been identified in Ivanti's Connect Secure, Policy Secure, and ZTA Gateways, classified as a stack-based buffer overflow. This flaw, designated CVE-2025-0282, enables unauthenticated attackers to execute arbitrary code, significantly increasing the risk of system compromise.
Who is affected
The vulnerability impacts several Ivanti products, which are widely used in enterprise environments, making organizations particularly vulnerable to exploitation.
- Ivanti Connect Secure (ICS)
- Ivanti Policy Secure (IPS)
- Ivanti Neurons for Zero Trust Access (ZTA) gateways
- Organizations utilizing these Ivanti solutions for secure access
What to do
Organizations using the affected Ivanti products should prioritize immediate action to mitigate potential risks. Regular updates and security patches are essential to protect against exploitation.
- Monitor for updates from Ivanti regarding patches for CVE-2025-0282.
- Implement network segmentation to limit exposure to vulnerable systems.
- Conduct a security assessment to identify and remediate any potential vulnerabilities.