CVE-2025-0282—Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

漏洞名称

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

描述

Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow which can lead to unauthenticated remote code execution.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service.

其他说明

• CISA Mitigation Instructions: https://www.cisa.gov/cisa-mitigation-instructions-CVE-2025-0282 Additional References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283
• https://nvd.nist.gov/vuln/detail/CVE-2025-0282

相关新闻文章

• CISA warns that RESURGE malware can be dormant on Ivanti devicesFebruary 27, 2026
• Murky Panda hackers exploit cloud trust to hack downstream customersAugust 22, 2025
• Ivanti Zero-Days Exploited to Drop MDifyLoader and Launch In-Memory Cobalt Strike AttacksJuly 18, 2025
• DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan AttacksApril 25, 2025
• Chinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell ToolApril 15, 2025

相关 CWE

• CWE-121