onyx --cves cve-2025-0283
CVE-2025-0283
- score
- <0.1
- cvss
- 7.0
- epss
- 17.5%
- published
- 2025-01-08
- kev added
- 2025-01-08
- first seen
Ivanti Connect Secure < 22.7R2.5, Ivanti Policy Secure < 22.7R1.2, and Ivanti Neurons for ZTA gateways < 22.7R2.3 contain a stack-based buffer overflow caused by improper input handling in the authentication process, letting local authenticated attackers escalate privileges, exploit requires attacker to be authenticated locally.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Added to CISA KEV
- Tracked by Onyx
Weaknesses
References 11
- https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283
- https://www.trendmicro.com/vinfo/gb/security/news/cybercrime-and-digital-threats/edge-under-siege-how-state-sponsored-actors-exploit-your-perimeter
- https://www.cert.ssi.gouv.fr/uploads/CERTFR-2026-CTI-002.pdf
- https://wwv.vulncheck.com/2026-vulncheck-exploit-intelligence-report
- https://5943619.hs-sites.com/hubfs/312-Year-in-Review/2026/Dragos-2026-OT-Cybersecurity-Report-A-Year-in-Review.pdf
- https://b9866c47-b467-4bc0-b154-6afa06da0ab5.usrfiles.com/ugd/b9866c_2578eb8c8ffe4257b30efef3ad0f953e.pdf
- https://view.bitsight.com/viewer/275c18689811d887dfa0368866323ed5#1
- https://cert.pl/uploads/docs/Report_CP_2025.pdf
- https://cdn.prod.website-files.com/626ff19cdd07d1258d49238d/699db1ba8d377a68f7d697b7_Threat%20Report%202026%20v4.pdf
- https://falconfeeds.io/blogs/kimsuky-threat-actor-operations-infrastructure-capabilities
- https://foresiet.com/blog/kimsuky-apt-data-leak/