MAR-25993211-r1.v2 Ivanti Connect Secure (RESURGE)
Notification This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product or service referenced in this bulletin or otherwise. This document is marked TLP:CLEAR--Recipients may share this information without restriction. Sources may use TLP:CLEAR when information carries minimal or no foreseeable risk of misuse, in accordance with applicable rules and procedures for public release. Subject to standard copyright rules, TLP:CLEAR information may be shared without restriction. For more information on the Traffic Lig
Read at CISA Malware Analysis Reports
- Vendor
- Ivanti
- Product
- Connect Secure
- EPSS
- 1.00 (p100)
- Exposure class
- Edge / VPN / firewall
Why it ranks 49 (High)
- EPSS 1.00 (high probability of exploitation)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Ivanti)
- Covered by 2 independent sources
- Government advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CISA Malware Analysis Reports (cisa.gov)
- CVE-2025-0282 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.