Improper Request Verification in Lanscope Endpoint Manager by Motex
CVE-2025-61932

9.3CRITICAL

Key Information:

Vendor

Motex Inc.

Status
Lanscope Endpoint Manager (on-premises) (client Program (mr) And Detection Agent (da))
Vendor
CVE Published:
20 October 2025

What is CVE-2025-61932?

The Lanscope Endpoint Manager suffers from a vulnerability due to improper verification of the origin of incoming requests. This flaw allows attackers to craft and send malicious packets, which could lead to the execution of arbitrary code on affected systems, posing significant security risks to users.

Affected Version(s)

Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) Ver.9.4.7.1 and earlier

References

https://www.motex.co.jp/news/notice/2025/release251020/
https://jvn.jp/en/jp/JVN86318557/

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-61932 : Improper Request Verification in Lanscope Endpoint Manager by Motex