CVE-2025-22467

Published Feb 11, 2025

Last updated a month ago

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2025-22467 is a stack-based buffer overflow vulnerability found in Ivanti Connect Secure versions prior to 22.7R2.6. This vulnerability allows a remote, authenticated attacker to execute arbitrary code. Notably, administrative privileges are not required to exploit this vulnerability. This vulnerability affects the confidentiality, integrity, and availability of systems using the affected versions of Ivanti Connect Secure. Ivanti has released version 22.7R2.6 to address this vulnerability, and users are strongly encouraged to update to this version as soon as possible. As of February 13, 2025, there is no evidence of public exploit code existing for this vulnerability.

Description: A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote code execution.
Source: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

3c1d8aa1-5a33-4ea4-8992-aadd6440af75: CWE-121

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "82432B1B-F50E-4D85-B4B5-6C91923F1BF9",
            "versionEndIncluding": "22.7"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2927A40D-E8A3-4DB6-9C93-04A6C6035C3D"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r1.1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1399BBB4-E62B-4FF6-B9E3-6AAC68D4D583"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r1.2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1EAD1423-4477-4C35-BF93-697A2C0697C6"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r1.3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "858353BC-12CB-4014-BFCA-DA7B1B3DD4B9"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r1.4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "865F72BF-57B2-4B0C-BACE-3500E0AE6751"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r1.5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "39E11407-E0C0-454F-B731-7DA4CBC696EB"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "247E71F8-A03B-4097-B7BF-09F8BF3ED4D6"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r2.1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E0059C69-4A18-4153-9D9A-5C1B03AD1453"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r2.2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FC523C88-115E-4CD9-A8CB-AE6E6610F7D4"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r2.3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3447428E-DBCD-4553-B51D-AC08ECAFD881"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r2.4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A08BAF98-7F05-4596-8BFC-91F1A79D3BD1"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r2.5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "40717D97-A062-49C4-B105-C22AAC3A206A"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]