HTTP: Ivanti Multiple Products CVE-2025-0282 Buffer Overflow
This signature detects attempts to exploit a known vulnerability against Ivanti Connect Secure. A successful attack can lead to arbitrary code execution.
Extended Description
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.
Affected Products
Ivanti policy_secure
References
CVE: CVE-2025-0282
Short Name
HTTP:CTS:IVNTI-MP-CS-RCE
Severity
Major
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
Buffer CVE-2025-0282 Ivanti Multiple Overflow Products
Release Date
02/25/2025
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
Sigpack Version
3785
False Positive
Unknown
Vendors
Ivanti