CVE-2025-22457

Severity

critical · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2025-04-04

Reference

https://nvd.nist.gov/vuln/detail/CVE-2025-22457

⚡ RCE ⌖ exploited in the wild shame 95/100 ransomwarerceexploited-in-wild

Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution.

Players implicated

Ivanti · vendor Connect Secure, Policy Secure, and ZTA Gateways · product

Description

Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution.

Affected FedRAMP products 2 in the catalog

Product	Provider	Status	Match
Ivanti Neurons for ITSM (Formerly Service Manager)	Ivanti	Authorized	vendor-exact · 0.90
Ivanti Neurons for MDM (Formerly MobileIron)	Ivanti	Authorized	vendor-exact · 0.90