Skip to content

Module for Ivanti Connect Secure RCE (CVE-2025-22457) #20025

Open
@cdelafuente-r7

Description

@cdelafuente-r7

Description

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

https://attackerkb.com/topics/0ybGQIkHzR/cve-2025-22457/rapid7-analysis

Metadata

Metadata

Type

No type

Projects

Status

Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions