coldbraid

CVE-2025-0282 Ivanti Connect Secure, Policy Secure, And ZTA Gateways

Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow which can lead to unauthenticated remote code execution.

CVSS
not scored

CWE-121

On CISA’s exploited list

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Added
2025-01-08
Federal patch deadline
2025-01-15
Ransomware use
known