CVE-2025-0282: Ivanti Connect Secure Stack Buffer Overflow
Is Ivanti Connect Secure VPN vulnerable?
A stack-based buffer overflow in Ivanti Connect Secure VPN that allows unauthenticated remote attackers to achieve code execution. Exploited as a zero-day to deploy web shells and steal VPN credentials.
Impact & Exploitation
Actively exploited by Chinese nation-state actors (UNC5337). Enabled persistent access to VPN infrastructure and lateral movement into corporate networks.
Precogs Research
This vulnerability intelligence report was analyzed and enriched by the Precogs AI Security Team. Our researchers continuously monitor emerging threats across AI code, LLM pipelines, and binary architectures to ensure accurate real-time remediation guidance.