CVE-2025-0282: Ivanti Connect Secure - Stack-based Buffer Overflow

HoneyLabs honeypots recorded 16 probes matching CVE-2025-0282 from 13 distinct source IP addresses in the last 7 days. Severity is rated critical.

This CVE is on CISA's Known Exploited Vulnerabilities list.

Request paths that identify it

  • /dana/home/index.cgi
  • /dana-na/auth/url_6/welcome.cgi
  • /dana-na/auth/url_default/welcome.cgi

Addresses probing it

Source IPProbesNetworkCountry
93.123.109.2143Techoff Srv LimitedBulgaria
185.141.60.1282Belcloud LTDBulgaria
185.3.95.311Akamai Connected CloudUnited Kingdom
134.209.52.131DigitalOcean, LLCUnited States
157.230.62.1461DigitalOcean, LLCUnited States
165.232.60.751DigitalOcean, LLCUnited States
74.207.241.1691Akamai Connected CloudUnited States
143.246.221.2231Alexhost SrlMoldova

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC66
AS44901Belcloud LTD32
AS48090Techoff Srv Limited31
AS63949Akamai Connected Cloud22
AS200019Alexhost Srl11
AS214036Ultahost, Inc.11

Captured requests

  • /dana/home/index.cgi
  • /dana-na/auth/url_6/welcome.cgi
  • /dana-na/auth/url_default/welcome.cgi

CVE report

CVE report

Open a specific CVE from the CVE tracker.