CVE-2025-61932

N/ACISA KEV

Description

Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.

Details CVE

Score CVSS v3.1N/A

Publie10/20/2025

Derniere modification10/23/2025

Sourcekev

Observations honeypot0

CISA KEV

FournisseurMotex

ProduitLANSCOPE Endpoint Manager

Nom vulnerabiliteMotex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

Date ajout KEV2025-10-22

Date limite remediation2025-11-12

Utilise dans ransomwareUnknown

Produits affectes

motex:lanscope_endpoint_manager

Faiblesses (CWE)

CWE-940

References

https://jvn.jp/en/jp/JVN86318557/(vultures@jpcert.or.jp)

https://www.motex.co.jp/news/notice/2025/release251020/(vultures@jpcert.or.jp)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61932(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.