ZeroDay Findings
Sign inSign up

Findings

CVE-2025-22457

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Published Apr 3, 2025 · updated Aug 3, 2026 · ivanti connect secure

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 3, 2025 · Catalog

    Detected

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

  2. Apr 4, 2025 · CISA KEV

    Known exploited

    Apply mitigations as set forth in the CISA instructions linked below.

  3. Apr 11, 2025 · CISA KEV

    Remediation due

    Apply mitigations as set forth in the CISA instructions linked below.

  4. Aug 3, 2026 · Catalog

    Updated

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

Required action

Apply mitigations as set forth in the CISA instructions linked below.

CISA due date Apr 11, 2025

Affected

  • cpe ivanti/connect secureversion unspecified
  • cpe ivanti/connect secure22.7
  • vendor Ivanti Connect Secure, Policy Secure, and ZTA Gatewaysversion unspecified

Sources

  • CISA KEVCVE-2025-22457

    Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution.

    cisa.gov
  • CVE.orgCVE-2025-22457

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2025-22457

    30-day exploitation probability 100.0%

    first.org
  • Metasploit Modulesexploit_linux/http/ivanti_connect_secure_stack_overflow_rce_cve_2025_22457

    Public module reference (great). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2025-22457

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

    nvd.nist.gov

References