CVE-2025-61932: Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.
Other sources
Motex LANSCOPE Endpoint Manager contains an improper verification of source of a communication channel vulnerability allowing an attacker to execute arbitrary code by sending specially crafted packets.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Discontinue use of Motex LANSCOPE Endpoint Manager (On-Premises), including the Client program (MR) and Detection agent (DA), if mitigations are unavailable.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61932?
CVE-2025-61932 has the potential for high severity due to its ability to allow arbitrary code execution.
How do I fix CVE-2025-61932?
To fix CVE-2025-61932, it is recommended to update Motex LANSCOPE Endpoint Manager to the latest version that patches this vulnerability.
What impact does CVE-2025-61932 have on my system?
CVE-2025-61932 can lead to unauthorized code execution, compromising the security and integrity of your system.
What versions of Motex LANSCOPE Endpoint Manager are affected by CVE-2025-61932?
CVE-2025-61932 affects multiple versions of Motex LANSCOPE Endpoint Manager, particularly those prior to version 9.4.7.1.
Is there an exploit for CVE-2025-61932 publicly available?
Details regarding an exploit for CVE-2025-61932 are not publicly specified, but the vulnerability itself poses a significant risk.