CVE-2025-0283: Buffer Overflow
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ivanti Connect Secureto a version that resolves this vulnerability.Fixed in 22.7R2.5 - Upgrade
Upgrade
Ivanti Policy Secureto a version that resolves this vulnerability.Fixed in 22.7R1.2 - Upgrade
Upgrade
Ivanti Neurons for ZTA gatewaysto a version that resolves this vulnerability.Fixed in 22.7R2.3
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0283?
CVE-2025-0283 has a high severity due to its exploitation potential for privilege escalation by a local authenticated attacker.
How do I fix CVE-2025-0283?
To mitigate CVE-2025-0283, upgrade Ivanti Connect Secure to version 22.7R2.5, Ivanti Policy Secure to version 22.7R1.2, or Ivanti Neurons for ZTA gateways to version 22.7R2.3.
What types of systems are affected by CVE-2025-0283?
CVE-2025-0283 affects Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways before certain patched versions.
Can CVE-2025-0283 be exploited remotely?
No, CVE-2025-0283 can only be exploited by a local authenticated attacker.
What are the potential consequences of exploiting CVE-2025-0283?
Exploitation of CVE-2025-0283 can lead to unauthorized privilege escalation, allowing attackers to gain elevated access rights on the affected systems.