CVE-2025-0283 — Ivanti Policy Secure Privilege Escalation¶

Key facts

CVE-2025-0283 is a Critical vulnerability: Ivanti Policy Secure Privilege Escalation. This entry ships a detection-only PoC.


CVE	CVE-2025-0283
Severity	Critical
Detection / prevention	—
PoC	poc.py
Source	2025/CVE-2025-0283/

Details¶

Overview¶

Local privilege escalation

Vulnerability Details¶

CVE ID: CVE-2025-0283
CVSS Score: 9.8 (Critical)
Type: Privilege Escalation
Product: Ivanti Policy Secure

Affected Products¶

Ivanti Policy Secure (specific versions - check vendor advisory)

Proof of Concept¶

Usage¶

python3 poc.py -t https://target.com -c
python3 poc.py -t https://target.com -c --version-only

Mitigation¶

Apply vendor patches immediately
Implement network segmentation
Monitor for exploitation attempts
Review access controls

References¶

NVD Entry

Disclaimer¶

This PoC is for authorized security testing only.

Frequently asked questions¶

What is CVE-2025-0283?¶

CVE-2025-0283 is a Critical vulnerability: Ivanti Policy Secure Privilege Escalation. This entry ships a detection-only PoC.

How do I detect CVE-2025-0283?¶

Run the detection-only PoC included with this entry against your Docker test lab to confirm whether a target is affected; pair it with your own IDS logging.

How do I block or mitigate CVE-2025-0283?¶

Upgrade to a fixed version per the vendor advisory; the NVD record lists the affected versions. Use the included PoC to verify your remediation.

For authorized security testing and research only. See the full source and NVD record.