CVE-2025-22457criticalunder attackransomwareCWE-121

CVE-2025-22457: critical vulnerability in Ivanti Connect Secure

Published · Updated

Follow this CVE+ Monitor Connect Secure+ Monitor Policy Secure

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9epss 100%
from disclosure to weapon5 days
Published on NVDApr 3
1st PoC+5d
metasploitApr 3
CISA KEV+1d
Action required by CISAfederal deadline: 2025-04-11

Apply mitigations as set forth in the CISA instructions linked below.

In short

A flaw in Ivanti Connect Secure, Policy Secure, and ZTA Gateways allows remote attackers to crash the system or run malicious code without needing to log in, due to improper memory handling.

Technical detail

Stack-based buffer overflow in vulnerable Ivanti gateway versions (Connect Secure <22.7R2.6, Policy Secure <22.7R1.4, ZTA Gateways <22.8R2.2) exploitable by unauthenticated remote attackers over the network, resulting in arbitrary code execution via memory corruption.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Ivanti · Connect SecureIvanti · Neurons for ZTA gatewaysIvanti · Policy Secure
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Ivanti Connect Secure

In the same product, most dangerous first.

CVE-2025-0282CRITICALCVE-2025-0282EPSS 100.0%KEVCVE-2026-104935HIGHCVE-2026-104935EPSS 88.9%KEVCVE-2026-118527MEDIUMCVE-2026-118527EPSS 0.8%KEVCVE-2026-111357HIGHCVE-2026-111357EPSS 0.5%KEVCVE-2024-37404CRITICALCVE-2024-37404EPSS 71.0%CVE-2024-21894HIGHCVE-2024-21894EPSS 19.0%