Vulnerability Description
Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Motex | Lanscope Endpoint Manager | < 9.3.2.7 |
Related Weaknesses (CWE)
References
- https://jvn.jp/en/jp/JVN86318557/Third Party Advisory
- https://www.motex.co.jp/news/notice/2025/release251020/Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2025-61932?
CVE-2025-61932 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending sp...
How severe is CVE-2025-61932?
CVE-2025-61932 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2025-61932?
Check the references section above for vendor advisories and patch information. Affected products include: Motex Lanscope Endpoint Manager.