Vulnerabilities > CVE-2025-22457 - Stack-based Buffer Overflow vulnerability in Ivanti products

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

ivanti

CWE-121

critical

NVD

Published: 2025-04-03

Updated: 2025-04-08

Summary

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

Vulnerable Configurations

Part	Description	Count
Application	Ivanti Ivanti Neurons FOR Zero Trust Access 22.2 Ivanti Neurons FOR Zero Trust Access - Ivanti Neurons FOR Zero Trust Access 22.5 Ivanti Neurons FOR Zero Trust Access 22.6 Ivanti Neurons FOR Zero Trust Access 22.3 Ivanti Neurons FOR Zero Trust Access 22.4 Ivanti Neurons FOR Zero Trust Access 22.7 Ivanti Neurons FOR Zero Trust Access 22.8 Ivanti Connect Secure 22.7 Ivanti Connect Secure 7.4 Ivanti Connect Secure 8.0 Ivanti Connect Secure 8.1 Ivanti Connect Secure 8.3 Ivanti Connect Secure 9.0 Ivanti Connect Secure 9.1 Ivanti Connect Secure 22.2 Ivanti Connect Secure 22.6 Ivanti Policy Secure 22.7 Ivanti Policy Secure 9.0 Ivanti Policy Secure 9.1	56

Common Weakness Enumeration (CWE)

CWE-121 - Stack-based Buffer Overflow

References

https://forums.ivanti.com/s/article/April-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-22457

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Related news

References