high7.0
CVE-2025-0283
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gatewa…
Impact
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Connect Secure | before 9.1 from 22.2 before 22.7 Versions 9.1, 21.9, 21.12, 22.1 |
| Ivanti | Neurons For Zero-Trust Access | All versions Versions 22.2, 22.3, 22.4, 22.5, 22.6 |
| Ivanti | Policy Secure | before 22.7 Version 22.7 |