CVE-2025-0283 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges.

Reserved 2025-01-06 | Published 2025-01-08 | Updated 2025-01-09 | Assigner ivanti

HIGH: 7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-121: Stack-based Buffer Overflow

Product status

Default status

affected

22.7R2.5

unaffected

Default status

affected

22.7R1.2

affected

Default status

affected

22.7R2.5

unaffected

References

forums.ivanti.com/...TA-Gateways-CVE-2025-0282-CVE-2025-0283

cve.org (CVE-2025-0283)

nvd.nist.gov (CVE-2025-0283)

Download JSON

https://cve.threatint.com/CVE/CVE-2025-0283

Support options

Helpdesk Chat, Email, Knowledgebase

Subscribe to our newsletter to learn more about our work.