CVE-2025-61932

Published Oct 20, 2025

Last updated 18 days ago

Lanscope Endpoint Manager

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-61932 is a vulnerability in Motex's Lanscope Endpoint Manager (On-Premises), specifically affecting the Client program (MR) and Detection Agent (DA). The vulnerability stems from the software's improper verification of the origin of incoming requests. This flaw allows a remote attacker to execute arbitrary code on the system by sending specially crafted packets. It has been confirmed that the vulnerability has been actively exploited in the wild. CISA has added CVE-2025-61932 to its Known Exploited Vulnerabilities (KEV) list.

Description: Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.
Source: vultures@jpcert.or.jp
NVD status: Analyzed
Products: lanscope_endpoint_manager

Risk scores

CVSS 4.0

Type: Secondary
Base score: 9.3
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: CRITICAL

CVSS 3.0

Type: Secondary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
Exploit added on: Oct 22, 2025
Exploit action due: Nov 12, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

vultures@jpcert.or.jp: CWE-940

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F9AF3F85-064B-469C-B530-7264EF91A04F",
            "versionEndExcluding": "9.3.2.7"
          },
          {
            "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "99DC2ADE-F5D6-45F9-B529-11C492FCDD31",
            "versionEndExcluding": "9.3.3.9",
            "versionStartIncluding": "9.3.3.0"
          },
          {
            "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "431F6B9C-8A9C-45FD-B287-E9E1D2B3ECEE",
            "versionEndExcluding": "9.4.0.5",
            "versionStartIncluding": "9.4.0.0"
          },
          {
            "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B2398AA5-1CFD-41BA-8229-84DAC45D9382",
            "versionEndExcluding": "9.4.1.5",
            "versionStartIncluding": "9.4.1.0"
          },
          {
            "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0429C621-5DDE-4773-99D3-A20DC0C4798F",
            "versionEndExcluding": "9.4.2.6",
            "versionStartIncluding": "9.4.2.0"
          },
          {
            "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "034F13F1-D926-4298-BCC9-DF424591CBF1",
            "versionEndExcluding": "9.4.3.8",
            "versionStartIncluding": "9.4.3.0"
          },
          {
            "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "66C87047-9DE9-4CE8-80A9-AEBEB58B8402",
            "versionEndExcluding": "9.4.4.6",
            "versionStartIncluding": "9.4.4.0"
          },
          {
            "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8FF0B7EE-805A-431D-96E5-BF5BDDD3178E",
            "versionEndExcluding": "9.4.5.4",
            "versionStartIncluding": "9.4.5.0"
          },
          {
            "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "21520838-C0C4-4F66-B5C6-1B6231225FF1",
            "versionEndExcluding": "9.4.6.3",
            "versionStartIncluding": "9.4.6.0"
          },
          {
            "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C669A3EF-3A71-46C0-B1FB-455CBB78B887",
            "versionEndIncluding": "9.4.7.1",
            "versionStartIncluding": "9.4.7.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.