VulnerabilitycriticalExploited in the wild

Ivanti VPN customers targeted via unrecognized RCE vulnerability (CVE-2025-22457)

Help Net Securityby @zeljkazorzApr 11, 2025 · 10:14 UTC (Apr 11, 2025)3 min read6 · 2 reads

Read at helpnetsecurity.com

Analyze CVE-2025-22457 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-22457 CVE-2025-0282 CVE-2023-46805 CVE-2024-21887 CVE-2023-4966

Tags: cve-2025-22457 cve-2025-0282 cve-2023-46805 cve-2024-21887 cve-2023-4966 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-21887 +1 related CVE CVE-2023-46805	Command Injection RCE in Ivanti Connect Secure and Policy Secure	9.1 group max	100%	KEVRansomwarePoC	Jan 12, 2024 KEV Jan 10, 2024
CVE-2023-4966	Info-Disclosure Buffer Overflow (CitrixBleed) in Citrix NetScaler ADC/Gateway	7.5	100%	KEVRansomware	Oct 10, 2023 KEV Oct 18, 2023
CVE-2025-0282	Unauthenticated RCE in Ivanti Connect Secure, Policy Secure, and ZTA Gateways	9.0	100%	KEVRansomwarePoC ×3	Jan 8, 2025 KEV Jan 8, 2025
CVE-2025-22457	Unauthenticated Stack Buffer Overflow RCE in Ivanti Connect Secure	9.8	100%	KEVRansomware	Apr 3, 2025 KEV Apr 4, 2025

From the original article

3 min read at helpnetsecurity.com

A suspected Chinese APT group has exploited CVE-2025-22457 – a buffer overflow bug that was previously thought not to be exploitable – to compromise appliances running Ivanti Connect Secure (ICS) 22. 7R2. 5 or earlier or Pulse Connect Secure 9.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.