VULNERABILITY INTELLIGENCE
CVE-2025-61932
CVSS score9.8 CRITICAL
EPSS probability2.77%
CISA KEVKnown exploited vulnerability
Published2025-10-20
Last modified2026-10-08
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
Vendor / product: Motex / LANSCOPE Endpoint Manager
Description
Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.
Weakness classification
- vultures@jpcert.or.jp: CWE-940
Primary references
- vultures@jpcert.or.jp — Third Party Advisory
- vultures@jpcert.or.jp — Vendor Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Third Party Advisory, US Government Resource