Research · Apr 3, 2025
Critical Stack-Based Buffer Overflow Vulnerability in Ivanti Products
A significant stack-based buffer overflow vulnerability has been identified in Ivanti Connect Secure, Policy Secure, and ZTA Gateways, allowing remote code execution for unauthenticated attackers.
What changed
A critical vulnerability has been discovered in several Ivanti products, specifically a stack-based buffer overflow that could enable remote code execution by an unauthenticated attacker. This vulnerability affects versions of Ivanti Connect Secure, Policy Secure, and ZTA Gateways prior to their respective latest releases.
Who is affected
The following products are impacted by this vulnerability, making them susceptible to potential exploitation:
Organizations utilizing these Ivanti solutions should be particularly vigilant.
- Ivanti Connect Secure before version 22.7R2.6
- Ivanti Policy Secure before version 22.7R1.4
- Ivanti ZTA Gateways before version 22.8R2.2
What to do
It is crucial for organizations using the affected Ivanti products to take immediate action to mitigate risks associated with this vulnerability. Upgrading to the latest versions is highly recommended to ensure security against potential exploits.
- Upgrade Ivanti Connect Secure to version 22.7R2.6 or later.
- Upgrade Ivanti Policy Secure to version 22.7R1.4 or later.
- Upgrade Ivanti ZTA Gateways to version 22.8R2.2 or later.