CVE-2025-0282
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.
- Affected products
- Ivanti Connect Secure, Ivanti Neurons For Zta Gateways, Ivanti Policy Secure
- Ivanti Connect Secure
- = 22.7
- Ivanti Neurons For Zero-trust Access
- = 22.7
- Ivanti Policy Secure
- = 22.7
- Fix
- Available
- CVSS 3.1
- 9.0 CRITICAL
- EPSS
- 100.0% (100th percentile)
- Weakness
- CWE-121, CWE-787
- NVD status
- Analyzed
- Published
- 2025-01-08
- Attack patterns
- CAPEC-100
CVE-2025-0282 at NVD
24 known exploits for CVE-2025-0282
Proof-of-concept code and exploit modules indexed by Sploitus
CVE-2025-0282-Ivanti-exploit
CVE-2025-0282
Ivanti-CVE-2025-0282
CVE-2025-0282
Ivanti-Connect-Secure-Logs-Parser
CVE-2025-0282
cve-2025-0282-ivanti_rce_reproduction
Blackash-CVE-2025-0282
CVE-2025-0282
CVE-2025-0282-Full-version
Exploit for Out-of-bounds Write in Ivanti Connect_Secure
Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure
📄 Ivanti Connect Secure 22.7R2.5 Remote Code Execution
Ivanti Connect Secure 22.7R2.5 - Remote Code Execution (RCE)
Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure
Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure
Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure
Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure
Ivanti Buffer Overflow Proof of Concept Exploit
Ivanti Buffer Overflow Proof of Concept
Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure
Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure
Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure
CVE-2025-0282