Story perspectives

Ivanti Issues Urgent Patches for Critical Zero-Day Vulnerabilities

1/10/2025

36 2

Summary

Ivanti Issues Patches

Ivanti has issued patches for critical vulnerabilities in Connect Secure, Policy Secure, and ZTA Gateways, identified as CVE-2025-0282 and CVE-2025-0283.
CVE-2025-0282 is a zero-day flaw allowing unauthenticated remote code execution, while CVE-2025-0283 permits privilege escalation for authenticated users.
Suspected Chinese attackers are linked to the exploitation of CVE-2025-0282, necessitating urgent updates and factory resets.
Patches for Policy Secure and ZTA Gateways are anticipated by January 21, 2025.

Summary

CISA Exposes Vulnerabilities

CISA has identified two path traversal vulnerabilities in Mitel MiCollab, confirming active exploitation.
The Fancy Product Designer plugin for WordPress contains critical unpatched vulnerabilities, enabling remote code execution and SQL injection.
KerioControl's CVE-2024-52875 vulnerability is actively exploited; users should apply the patch released on December 19, 2024.
A new Mirai-based botnet targets over 20 zero-day vulnerabilities in industrial routers and smart devices for DDoS attacks.

History

Historical Context

Recent vulnerabilities in Ivanti's software echo the 2010 Operation Aurora attacks, where zero-day exploits targeted major companies, including Google, allegedly by Chinese state-sponsored hackers. Both incidents highlight the persistent threat of sophisticated cyberattacks exploiting unpatched vulnerabilities, underscoring the critical need for timely security updates and vigilance.

1 of 3

Ivanti Issues Patches

Ivanti has issued patches for critical vulnerabilities in Connect Secure, Policy Secure, and ZTA Gateways, identified as CVE-2025-0282 and CVE-2025-0283.
CVE-2025-0282 is a zero-day flaw allowing unauthenticated remote code execution, while CVE-2025-0283 permits privilege escalation for authenticated users.
Suspected Chinese attackers are linked to the exploitation of CVE-2025-0282, necessitating urgent updates and factory resets.
Patches for Policy Secure and ZTA Gateways are anticipated by January 21, 2025.

1 / 3