CVE-2025-61932

Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

Motex LANSCOPE Endpoint Manager

CVSS

9.8Critical

ExploitationExploited in the wildAdded to KEV 22 Oct 2025CISA KEV

Exploit odds (EPSS)2.77%Chance of exploitation activity in the next 30 days, higher than 86% of CVEs. Scored 23 Oct 2026FIRST EPSS

Fixed inNone listedNo source names a fixed version yet

Federal deadline12 Nov 2025Remediation due date for US federal agenciesCISA KEV

CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

No source in this snapshot names a fixed version.

Timeline

20 Oct 2025, 07:25 UTCPublishedCVE List
22 Oct 2025Added to CISA KEVCISA KEV

Description

Motex LANSCOPE Endpoint Manager contains an improper verification of source of a communication channel vulnerability allowing an attacker to execute arbitrary code by sending specially crafted packets.

Text from CVE List

Affected versions 1

Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA))affected: Ver.9.4.7.1 and earlierCVE List