HTTP: Ivanti Connect Secure Remote Code Execution
This signature detects attempts to exploit a known vulnerability against Ivanti Connect Secure. A successful attack can lead to arbitrary code execution.
Extended Description
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.
Affected Products
Ivanti policy_secure
References
CVE: CVE-2025-0282
Short Name
HTTP:CTS:IVNTI-CS-RCE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2025-0282 Code Connect Execution Ivanti Remote Secure
Release Date
01/16/2025
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
Sigpack Version
3785
False Positive
Unknown
Vendors
Ivanti