CVE-2025-0282: Ivanti Connect Secure Stack Buffer Overflow
Is Ivanti Connect Secure VPN vulnerable?
A stack-based buffer overflow in Ivanti Connect Secure VPN that allows unauthenticated remote attackers to achieve code execution. Exploited as a zero-day to deploy web shells and steal VPN credentials.
Impact & Exploitation
Actively exploited by Chinese nation-state actors (UNC5337). Enabled persistent access to VPN infrastructure and lateral movement into corporate networks.
How Precogs AI Detects Ivanti Connect Secure Stack Buffer Overflow
Precogs AI Binary SAST analyzes VPN appliance firmware for stack buffer overflow conditions, detecting vulnerable code patterns in embedded network devices.
Precogs Research
This vulnerability intelligence report was analyzed and enriched by the Precogs AI Security Team. Our researchers continuously monitor emerging threats across AI code, LLM pipelines, and binary architectures to ensure accurate real-time remediation guidance.