Improper verification of communication channel in Motex Lanscope Endpoint Manager and…
Priority CRITICAL 99Exploited in the wildCWE-940Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.
Why it matters now
Exploitation Active In CISA KEV since 2025-10-22CISA due date 2025-11-12
EPSS 0.02768 86th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Motex | Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) | Ver.9.4.7.1 and earlier | — | No fix listed | CNA |
- Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) VendorMotex Affected Ver.9.4.7.1 and earlier Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:* | before 9.3.2.7; 9.3.3.0 to before 9.3.3.9; 9.4.0.0 to before 9.4.0.5; 9.4.1.0 to before 9.4.1.5; 9.4.2.0 to before 9.4.2.6; 9.4.3.0 to before 9.4.3.8; 9.4.4.0 to before 9.4.4.6; 9.4.5.0 to before 9.4.5.4; 9.4.6.0 to before 9.4.6.3; 9.4.7.0 – 9.4.7.1 | Vulnerable | Motex |
- cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:* Versions before 9.3.2.7; 9.3.3.0 to before 9.3.3.9; 9.4.0.0 to before 9.4.0.5; 9.4.1.0 to before 9.4.1.5; 9.4.2.0 to before 9.4.2.6; 9.4.3.0 to before 9.4.3.8; 9.4.4.0 to before 9.4.4.6; 9.4.5.0 to before 9.4.5.4; 9.4.6.0 to before 9.4.6.3; 9.4.7.0 – 9.4.7.1 Vulnerable ·Motex
Remediation
No fixed version listed by the sources yet.
Timeline
- 2025-10-22 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2025-61932
- 2026-10-03 Alias added: GHSA-g3v5-cgpf-rr2h
References
More Motex Lanscope Endpoint Manager vulnerabilities
- TI-2026-20850 Path traversal in Motex Lanscope Endpoint Manager Sub-Manager Server CVSS 4.0CRITICAL 9.3
Sources
- CVE-2025-61932 · CVE Program
- CVE-2025-61932 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-g3v5-cgpf-rr2h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences