← Back

CVE-2025-61932

nvd nist
Published: Oct 20, 2025Modified: Oct 8, 2026CISA KEV

JSON object

Loading...
9.3
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: vultures@jpcert.or.jp (Secondary)

Description

Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.

Affected (10)

Motex
1 product
Lanscope Endpoint Manager
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Motex
Lanscope Endpoint Manager
version < 9.3.2.7
Lanscope Endpoint Manager
9.3.3.0 ≤ version < 9.3.3.9
Lanscope Endpoint Manager
9.4.0.0 ≤ version < 9.4.0.5
Lanscope Endpoint Manager
9.4.1.0 ≤ version < 9.4.1.5
Lanscope Endpoint Manager
9.4.2.0 ≤ version < 9.4.2.6
Lanscope Endpoint Manager
9.4.3.0 ≤ version < 9.4.3.8
Lanscope Endpoint Manager
9.4.4.0 ≤ version < 9.4.4.6
Lanscope Endpoint Manager
9.4.5.0 ≤ version < 9.4.5.4
Lanscope Endpoint Manager
9.4.6.0 ≤ version < 9.4.6.3
Lanscope Endpoint Manager
9.4.7.0 ≤ version ≤ 9.4.7.1

Related CWEs

CWE-940
Improper Verification of Source of a Communication Channel
The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin.

References (3)

Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.