This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] Ivanti fixes 8 vulnerabilities
Ivanti fixes 8 vulnerabilities in its products, 3 of them critical. The most serious ones are described below; the remaining ones can be found at [1]. Products and their fixes: Ivanti Connect Secure (ICS) - 22.7R2.6 Ivanti Policy Secure (IPS) - 22.7R1.3 Ivanti Secure Access Client (ISAC) - 22.8R1
Due to a stack-based buffer overflow in ICS, an authenticated remote attacker can execute code [1].
The vulnerability is present in product:
- *:Ivanti Connect Secure;<22.7R2.6
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
More information:
- CVE-2025-22467 at cve.org, NVD
- CWE-121: Stack-based Buffer Overflow at cwe.mitre.org
The vulnerability was publicly disclosed 11. 2. 2025.
An authenticated remote attacker with administrator privileges can execute code in ICS and IPS [1].
The vulnerability is present in products:
- *:Ivanti Connect Secure;<22.7R2.4
- *:Ivanti Policy Secure;<22.7R1.3
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
More information:
- CVE-2024-10644 at cve.org, NVD
- CWE-94: Improper Control of Generation of Code ('Code Injection') at cwe.mitre.org
The vulnerability was publicly disclosed 11. 2. 2025.
An authenticated remote attacker with administrator privileges can write arbitrary files in ICS and IPS [1].
The vulnerability is present in products:
- *:Ivanti Connect Secure;<22.7R2.4
- *:Ivanti Policy Secure;<22.7R1.3
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
More information:
- CVE-2024-38657 at cve.org, NVD
- CWE-73: External Control of File Name or Path at cwe.mitre.org
The vulnerability was publicly disclosed 11. 2. 2025.
An authenticated local attacker can delete arbitrary files in ISAC [1].
The vulnerability is present in product:
- *:Ivanti Secure Access Client;<22.8R1
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
More information:
- CVE-2024-13813 at cve.org, NVD
- CWE-732: Incorrect Permission Assignment for Critical Resource at cwe.mitre.org
The vulnerability was publicly disclosed 11. 2. 2025.
An authenticated remote attacker with administrator privileges can read arbitrary files in ICS and IPS [1].
The vulnerability is present in products:
- *:Ivanti Connect Secure;<22.7R2.6
- *:Ivanti Policy Secure;<22.7R1.3
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
More information:
- CVE-2024-12058 at cve.org, NVD
- CWE-73: External Control of File Name or Path at cwe.mitre.org
The vulnerability was publicly disclosed 11. 2. 2025.
By CESNET, z.s.p.o. Michaela Ručková on 19. 2. 2025.