VDB
BDU%3A2025-00224
BDU%3A2025-00224
PUBLISHED
CVSS 7 HIGH
Уязвимость средств контроля сетевого доступа Ivanti Connect Secure (ранее Pulse Connect Secure), Ivanti Policy Secure и средства управления IT-сервисами Ivanti Neurons for ZTA, связанная с переполнением буфера в стеке, позволяющая нарушителю повысить свои привилегии
Risk Scores
CVSS 3.1
7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ivanti | Policy Secure | 22.7R1.2 |
| Ivanti | Connect Secure, Policy Secure, Ivanti Neurons for Zero Trust Access (nZTA) | |
| Ivanti | Connect Secure | 22.7R2.5 |
| Ivanti | Neurons for ZTA gateways | 22.7R2.5 |
Timeline
- Jan 8, 2025 PoC Published
- Jan 8, 2025 PoC Published
- Jan 8, 2025 PoC Published
- Jan 8, 2025 PoC Published
- Jan 8, 2025 PoC Published
- Jan 8, 2025 PoC Published
- Jan 8, 2025 PoC Published
- Jan 8, 2025 PoC Published
- Jan 8, 2025 PoC Published
- Jan 8, 2025 PoC Published
- Jan 8, 2025 PoC Published
- Jan 8, 2025 PoC Published
References
- https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283 url
- https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283?language=en_US advisory
- https://www.cybersecurity-help.cz/vdb/SB2025010873 url
- https://www.cisa.gov/sites/default/files/2025-03/AR25-087A%20SIGMA%20YAML.pdf url