Description
Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow which can lead to unauthenticated remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Connect Secure | Ivanti / Connect Secure | >= 22.7R2, <= 22.7R2.4 | affected |
| Connect Secure | Ivanti / Connect Secure | 22.7R2.5 | unaffected |
| Neurons for ZTA gateways | Ivanti / Neurons for ZTA gateways | >= 22.7R2, <= 22.7R2.3 | affected |
| Neurons for ZTA gateways | Ivanti / Neurons for ZTA gateways | 22.7R2.5 | unaffected |
| Policy Secure | Ivanti / Policy Secure | >= 22.7R1, <= 22.7R1.2 | affected |