Critical severity · published Oct 20, 2025
CVE-2025-61932
Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
In wildKEV
9.8
CVSS
2.8%
EPSS
Yes
On KEV
Description
Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildYes
CISA KEVListed Oct 22, 2025
Federal remediation dueNov 12, 2025
Ransomware campaign useNot known
Affected products
Which versions
LE
Lanscope Endpoint Manager · Motex
before 9.3.2.7; 9.3.3.0 before 9.3.3.9; 9.4.0.0 before 9.4.0.5; 9.4.1.0 before 9.4.1.5; 9.4.2.0 before 9.4.2.6; 9.4.3.0 before 9.4.3.8; +4 more · source: NVD, KEV
In the news
VulnerabilityHigh
[CISA KEV] CVE-2025-61932: Motex LANSCOPE Endpoint Manager - Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
Motex LANSCOPE Endpoint Manager contains an improper verification of source of a communication channel vulnerability allowing an attacker to execute arbitrary code by sending specially crafted packets.
LELANSCOPE Endpoint ManagerCVE-2025-61932
Oct 22, 2025·CISA KEV