Paper/Archive/CVE-2025-61932

CVE-2025-61932

MOTEX Inc. Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) — Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

KEV · due 12 Nov EPSS 3%public exploit SSVC act CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 In CISA KEV+3030.0 EPSS percentile 86.3.863 × 2017.3 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.

Affected

ProductAffectedFixed inSource

Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA))Ver.9.4.7.1 and earlier–CNA

Scores by source

jpcert (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

jpcert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refmotex.co.jp/news/notice/2025/release251020 refjvn.jp/en/jp/JVN86318557 refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61932 kevcisa.gov/known-exploited-vulnerabilities-catalog