CVE-2025-0282
KEV RANSOMWARECRITICAL 9.0EPSS 100.0%
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.
- CVSS v3.1
- 9.0 CRITICAL
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - CVSS v3.1
- 9.0 CRITICAL
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - EPSS
- 99.98% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2025-01-08, used in ransomware campaigns
- Nuclei
- critical
- Published
- 2025-01-08
- Updated
- 2026-08-04
Proof-of-concept exploits (12)
- https://labs.watchtowr.com/exploitation-walkthrough-and-techniques-ivanti-connect-secure-…
- AdaniKamal/CVE-2025-02822★ · 2025-01-28
- AnonStorks/CVE-2025-0282-Full-version4★ · 2025-01-12
- Hexastrike/Ivanti-Connect-Secure-Logs-Parser5★ · 2025-01-19
- Hexastrike/Ivanti-Secure-Connect-Logs-Parser5★ · 2025-01-19
- absholi7ly/CVE-2025-0282-Ivanti-exploit53★ · 2025-01-11
- almanatra/CVE-2025-02822★ · 2025-01-22
- punitdarji/Ivanti-CVE-2025-02823★ · 2025-03-10
- watchtowrlabs/CVE-2025-028231★ · 2025-01-18
- gmh5225/Blackash-CVE-2025-0282
- razureink/cve-2025-0282-ivanti_rce_reproduction
- sfewer-r7/CVE-2025-028249★ · 2025-01-16