IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
9.0Kritik KEV Fidye yazılımında kullanılıyor

CVE-2025-22457Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Ivanti Connect Secure; Ivanti Policy Secure; Ivanti Neurons for ZTA gateways Yayım: (1 yıl önce)

Aktif olarak istismar ediliyor — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 04.04.2025 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 11.04.2025.

Gerekli işlem: Apply mitigations as set forth in the CISA instructions linked below. CISA Mitigation Instructions: https://www.cisa.gov/cisa-mitigation-instructions-cve-2025-22457 ; Additional References: https://forums.ivanti.com/s/article/April-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-22457 ; https://nvd.nist.gov/vuln/detail/CVE-2025-22457

Açıklama

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

Zayıflık türü (CWE): CWE-121CWE-787

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Ivanti Connect Secure fixed 22.7R2.6
Ivanti Neurons for ZTA gateways fixed 22.8R2.2
Ivanti Policy Secure fixed 22.7R1.4
ivanti zero trust access gateway < 22.8

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (23)
  • cpe:2.3:a:ivanti:connect_secure:*:-:*:*:*:*:*:* < 22.7
  • cpe:2.3:a:ivanti:connect_secure:22.7:-:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:connect_secure:22.7:r1:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:connect_secure:22.7:r1.1:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:connect_secure:22.7:r1.2:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:connect_secure:22.7:r1.3:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:connect_secure:22.7:r1.4:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:connect_secure:22.7:r1.5:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:connect_secure:22.7:r2:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:connect_secure:22.7:r2.1:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:connect_secure:22.7:r2.2:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:connect_secure:22.7:r2.3:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:connect_secure:22.7:r2.4:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:connect_secure:22.7:r2.5:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:policy_secure:*:-:*:*:*:*:*:* < 22.7
  • cpe:2.3:a:ivanti:policy_secure:22.7:-:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:policy_secure:22.7:r1:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:policy_secure:22.7:r1.1:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:policy_secure:22.7:r1.2:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:policy_secure:22.7:r1.3:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:zero_trust_access_gateway:*:*:*:*:*:*:*:* < 22.8
  • cpe:2.3:a:ivanti:zero_trust_access_gateway:22.8:-:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:zero_trust_access_gateway:22.8:r2.1:*:*:*:*:*:*

Aynı üründe son açıklar — Ivanti (Connect Secure, EPMM…)

4.9Orta
CVE-2026-83528
Ivanti Endpoint Manager Mobile

Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to leak GDPR protected user information.

5.5Orta
CVE-2026-107405
Ivanti Endpoint Manager Mobile

An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local authenticated attacker to trigger a denial of service.

4.9Orta
CVE-2026-107404
Ivanti Endpoint Manager Mobile

Argument injection in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to delete arbitrary files on disk.

4.9Orta
CVE-2026-105427
Ivanti Endpoint Manager Mobile

Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to permanently disable all Apache HTTPS services resulting in denial of service.

6.7Orta
CVE-2026-105426
Ivanti Endpoint Manager Mobile

Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to set arbitrary Linux kernel parameters as root.

5.5Orta
CVE-2026-123181
Ivanti Sentry

A path traversal vulnerability in Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with administrative privileges to create arbitrary directories and files with root privileges.