PerimeterClock

Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.

CVE-2025-0282: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Vendor: Ivanti
Product: Connect Secure, Policy Secure, and ZTA Gateways
EPSS: 1.000 (100.0th percentile, 2026-10-30)
Known ransomware use: Known

Summary

Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow that can lead to unauthenticated remote code execution. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2025-01-08, and it is known to be used by ransomware.

Automated summary, checked against CISA and vendor descriptions; not yet reviewed by an analyst.

Timeline

Date Event Source
2025-01-08 Added to CISA KEV (confirmed exploitation) CISA KEV

References

Affected and fixed versions: see the vendor advisory or NVD entry below.