{"id":949,"date":"2025-01-10T10:42:38","date_gmt":"2025-01-10T10:42:38","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/ivanti-upozorava-na-kriticne-ranjivosti\/"},"modified":"2026-11-04T08:52:55","modified_gmt":"2026-11-04T08:52:55","slug":"ivanti-upozorava-na-kriticne-ranjivosti","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/ranjivosti\/ivanti-upozorava-na-kriticne-ranjivosti\/","title":{"rendered":"Ivanti upozorava na kriti\u010dne ranjivosti"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>Ivanti upozorava na kriti\u010dne ranjivosti koje napada\u010dima omogu\u0107uju neovla\u0161teno udaljeno izvr\u0161avanje k\u00f4da i podizanje ovlasti.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2025-0282\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2025-0282<\/a><br>CVSS: <span class=\"has-inline-color has-vivid-red-color\">9.0<\/span><br>Ranjivi proizvodi: <\/strong>Ivanti Connect Secure (ICS), Ivanti Policy Secure, Ivanti Neurons for Zero Trust Access (ZTA) Gateways (pristupnik)<br><strong>Sa\u017eetak:<\/strong> stack-based buffer overflow u Ivanti Connect Secureu prije verzije 22.7R2.5, Ivanti Policy Secureu prije verzije 22.7R1.2 i Ivanti Neurons for ZTA gateways prije verzije 22.7R2.3 omogu\u0107uju neovla\u0161teno udaljeno izvr\u0161avanje k\u00f4da.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2025-0283\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2025-0283<\/a><br>CVSS: 7.0<br>Ranjivi proizvodi:<\/strong> Ivanti Connect Secure, Ivanti Policy Secure, Ivanti Neurons for ZTA gateways<br><strong>Sa\u017eetak:<\/strong> stack-based buffer overflow u Ivanti Connect Secureu prije verzije 22.7R2.5, Ivanti Policy Secureu prije verzije 22.7R1.2 i Ivanti Neurons for ZTA gateways prije verzije 22.7R2.3 omogu\u0107uju lokalnom, autentificiranom napada\u010du podizanje ovlasti.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Preporuke:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ivanti savjetuje preuzimanje a\u017euriranja \u0161to je prije mogu\u0107e, jer se <strong>ranjivost CVE-2025-0282 aktivno iskori\u0161tava.<\/strong> Vi\u0161e na: <a href=\"https:\/\/forums.ivanti.com\/s\/article\/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283?language=en_US\" target=\"_blank\" rel=\"noreferrer noopener\">Security Advisory Ivanti Connect Secure, Policy Secure &amp; ZTA Gateways (CVE-2025-0282, CVE-2025-0283)<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iskori\u0161tavanje ranjivosti CVE-2025-0282 mogu\u0107e je otkriti kori\u0161tenjem <strong>Interity Checker Toola (ICT)<\/strong>. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Napomena: najnovija verzija ICT-a (ICT-V22725) radi samo s ICS verzijama 22.7R2.5 i novije.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\">Mogu\u0107a rje\u0161enja<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ivanti Connect Secure<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Napravite provjeru sustava ICT-om. A\u017eurirajte ICS na verziju 22.7R2.5 i nastavite pratiti stanje pomo\u0107u ICT-a i drugih sigurnosnih alata.<br>Radi dodatnog opreza, prije pu\u0161tanja verzije 22.7R2.5 u rad, savjetuje se i vra\u0107anje sustava na tvorni\u010dke postavke. <a href=\"https:\/\/forums.ivanti.com\/s\/article\/Recovery-Steps\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/forums.ivanti.com\/s\/article\/Recovery-Steps<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ivanti Policy Secure<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ivanti Policy Secure nije namijenjen za dostupnost putem interneta i to zna\u010dajno umanjuje rizik od kompromitacije. Rje\u0161enje za IPS ranjivost bit \u0107e dostupno 21. sije\u010dnja 2025. godine i bit \u0107e dostupno putem Ivanti portala za preuzimanje a\u017euriranja. Trenutno nisu poznati slu\u010dajevi iskori\u0161tavanja ove ranjivosti.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ivanti Neurons for ZTA Gateways<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iz Ivantija poru\u010duju kako se Ivanti Neurons for ZTA Gateways ne mo\u017ee kompromitirati dok je u produkciji. Rizik od eksploatacije postoji ako je pristupnik za ovo rje\u0161enje generiran, ali ostavljen nepovezan sa ZTA kontrolerom.<br>Popravak ove ranjivosti planiraju izdati 21. sije\u010dnja 2025. Trenutno nisu poznati slu\u010dajevi iskori\u0161tavanja ove ranjivosti.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Dodatne informacije:<\/strong><br><a href=\"https:\/\/www.cisa.gov\/cisa-mitigation-instructions-cve-2025-0282\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.cisa.gov\/cisa-mitigation-instructions-cve-2025-0282<\/a><br><a href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/ivanti-connect-secure-vpn-zero-day\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/ivanti-connect-secure-vpn-zero-day\/<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Ivanti upozorava na kriti\u010dne ranjivosti koje napada\u010dima omogu\u0107uju neovla\u0161teno udaljeno izvr\u0161avanje k\u00f4da i podizanje ovlasti. CVE-2025-0282CVSS: 9.0Ranjivi proizvodi: Ivanti Connect Secure (ICS), Ivanti Policy Secure, Ivanti Neurons for Zero Trust Access (ZTA) Gateways (pristupnik)Sa\u017eetak: stack-based buffer overflow u Ivanti Connect Secureu prije verzije 22.7R2.5, Ivanti Policy Secureu prije verzije 22.7R1.2 i Ivanti Neurons for ZTA [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1361,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"tema":[],"class_list":["post-949","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ranjivosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/949","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=949"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/949\/revisions"}],"predecessor-version":[{"id":1369,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/949\/revisions\/1369"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1361"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=949"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=949"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=949"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=949"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=949"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}