Critical Stack-Based Buffer Overflow in Ivanti Connect Secure, Policy Secure, and ZTA Gateways (CVE‑2025‑22457) Enables Remote Code Execution
What It Is — Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack‑based buffer overflow that can be triggered remotely without authentication, allowing an attacker to execute arbitrary code on the appliance.
Exploitability — The vulnerability is publicly disclosed; no public exploit code has been released yet, but the remote‑unauthenticated nature gives it a high likelihood of exploitation. CVSS v3.1 base score 9.8 (Critical).
Affected Products — Ivanti Connect Secure, Policy Secure, and ZTA Gateways (all versions prior to the vendor‑issued patch).
Why It Matters for Trust & Control Assurance
- Demonstrates the need for continuous vulnerability‑management controls and timely patch deployment as evidence of due diligence.
- Provides a concrete test of the “Vulnerability Management” control objective that maps to many frameworks (e.g., NIST CSF ID.RA‑1, ISO 27001 A.12.6).
- Failure to remediate can erode audit‑ready posture and undermine buyer confidence in your security assurances.
Recommended Actions
- Verify current Ivanti version against the vendor advisory and apply the patched release immediately.
- Update your asset inventory to flag all affected gateways and enforce automated patch‑management policies.
- Enable and review detailed logging on the gateways for anomalous execution attempts.
- Map this finding to your vulnerability‑management control area and capture remediation evidence for audit purposes.
Source: CISA KEV – CVE‑2025‑22457