# CVE-2025-22457

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

- Page: https://www.vulneraibility.com/cve/CVE-2025-22457
- CVSS: 9.0
- Known exploited: yes, in CISA KEV since 2025-04-04; CISA due date 2025-04-11; known ransomware use
- EPSS: 99.98%
- Public exploit code: 1 Metasploit module · 6 GitHub proofs of concept (first 2025-04-08)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2025-04-03)
- Weakness: CWE-121
- Published: 2025-04-03

## Affected

- ivanti:connect_secure
- ivanti:policy_secure
- ivanti:zero_trust_access_gateway

## References

- [other] https://forums.ivanti.com/s/article/April-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-22457
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-22457

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.