Conversation

Notices

1. Embed this notice
   Will Dormann (wdormann@infosec.exchange)'s status on Wednesday, 12-Feb-2025 04:07:26 JST Will Dormann

   For folks still running Ivanti stuff for some reason, you've got work to do.
   Again.

   CVE-2025-22467 is a CVSS 9.9 stack buffer overflow RCE.

   https://forums.ivanti.com/s/article/February-Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-and-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs

   • Kevin Beaumont repeated this.
   • Embed this notice
     Will Dormann (wdormann@infosec.exchange)'s status on Wednesday, 12-Feb-2025 04:07:26 JST Will Dormann

     in reply to

     With the release of ICS 22.7R2.6, Ivanti has apparently discovered the value of compiling in exploit mitigations. (many of which have been around for 22 years)

     With R2.6, the web server, despite still being 32-bit, has stack canaries, full relro, and some fortify.

     Baby steps, I suppose...