AdvisorycriticalExploited in the wild

CISA warns of latest Ivanti firewall bug being exploited by suspected Chinese hackers

The RecordApr 4, 2025 · 21:26 UTC (Apr 4, 2025)3 min read3

Read at therecord.media

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-22457 CVE-2025-0282 CVE-2023-46805 CVE-2024-21887

Tags: cve-2025-22457 cve-2025-0282 cve-2023-46805 cve-2024-21887 advisory

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-21887 +1 related CVE CVE-2023-46805	Command Injection RCE in Ivanti Connect Secure and Policy Secure	9.1 group max	100%	KEVRansomwarePoC	Jan 12, 2024 KEV Jan 10, 2024
CVE-2025-0282	Unauthenticated RCE in Ivanti Connect Secure, Policy Secure, and ZTA Gateways	9.0	100%	KEVRansomwarePoC ×3	Jan 8, 2025 KEV Jan 8, 2025
CVE-2025-22457	Unauthenticated Stack Buffer Overflow RCE in Ivanti Connect Secure	9.8	100%	KEVRansomware	Apr 3, 2025 KEV Apr 4, 2025

From the original article

3 min read at therecord.media

Another vulnerability impacting firewall products from Ivanti is being exploited by alleged China-based hackers.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.