CVE-2025-0293 CLRF Injection in Ivanti Connect Secure <22.7R2.8 writes config
CVE-2025-0293 Published on July 8, 2025
CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk.
Vulnerability Analysis
CVE-2025-0293 can be exploited with network access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.
Weakness Type
What is a CRLF Injection Vulnerability?
The software uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.
CVE-2025-0293 has been classified to as a CRLF Injection vulnerability or weakness.
Products Associated with CVE-2025-0293
stack.watch emails you whenever new vulnerabilities are published in Ivanti Connect Secure or Ivanti Policy Secure. Just hit a watch button to start following.
Affected Versions
Ivanti Connect Secure:- Version 22.7R2.8 is unaffected.
- Version 22.7R1.5 is unaffected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.