CVE-2025-61932criticalunder attackCWE-940

CVE-2025-61932: critical vulnerability in MOTEX Inc. Lanscope Endpoint Manager…

Published · Updated

Follow this CVE+ Monitor LANSCOPE EndpointManager WebFiltering+ Monitor Lanscope Endpoint Manager and Detection agent)

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

58Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 9.3epss 2.8%
from disclosure to weapon
Published on NVDOct 20
CISA KEV+2d
Action required by CISAfederal deadline: 2025-11-12

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

Lanscope Endpoint Manager allows attackers to run malicious code on computers by sending specially crafted packets because the software doesn't properly check where requests come from.

Technical detail

CWE-940 vulnerability in Lanscope Endpoint Manager's Client program and Detection agent fails to validate request origin, enabling arbitrary code execution via crafted packet injection. No authentication or user interaction required; local network access or ability to reach the service constitutes the attack vector.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
MOTEX Inc. · Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA))