Yüksek CISA KEV
CVE-2025-0282: Ivanti Connect Secure, Policy Secure, and ZTA Gateways: aktif olarak istismar edilen açık
Açıklama (NVD)
Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow which can lead to unauthenticated remote code execution.
Özet bilgiler
- EPSS
- %99,98 (yüzdelik 100)
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2025-01-08 · Son tarih: 2025-01-15 · fidye yazılımı kampanyalarında kullanıldı
Gerekli aksiyon: Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service.