{"id":"CVE-2025-61932","title":"Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.","summary":"Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-940"],"vendor":"motex","product":"lanscope_endpoint_manager","affected":["lanscope_endpoint_manager < 9.3.2.7","lanscope_endpoint_manager >= 9.3.3.0, < 9.3.3.9","lanscope_endpoint_manager >= 9.4.0.0, < 9.4.0.5","lanscope_endpoint_manager >= 9.4.1.0, < 9.4.1.5","lanscope_endpoint_manager >= 9.4.2.0, < 9.4.2.6","lanscope_endpoint_manager >= 9.4.3.0, < 9.4.3.8","lanscope_endpoint_manager >= 9.4.4.0, < 9.4.4.6","lanscope_endpoint_manager >= 9.4.5.0, < 9.4.5.4","lanscope_endpoint_manager >= 9.4.6.0, < 9.4.6.3","lanscope_endpoint_manager >= 9.4.7.0, <= 9.4.7.1"],"patched":["lanscope_endpoint_manager 9.4.6.3"],"published":"2025-10-20","updated":"2026-10-08","sourceUpdated":"2026-10-08T22:10:00.563","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-61932","references":[{"url":"https://jvn.jp/en/jp/JVN86318557/","label":"vultures@jpcert.or.jp"},{"url":"https://www.motex.co.jp/news/notice/2025/release251020/","label":"vultures@jpcert.or.jp"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61932","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","kev","in-the-wild"],"epss":0.02768,"epssPercentile":0.85886,"kev":true,"kevDateAdded":"2025-10-22","kevDueDate":"2025-11-12","kevRansomware":false,"exploited":true,"ingestedAt":"2026-10-08T22:11:53.815Z","slug":"CVE-2025-61932","body":"## Overview\n\nLanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.\n\n## Affected\n\n- `lanscope_endpoint_manager < 9.3.2.7`\n- `lanscope_endpoint_manager >= 9.3.3.0, < 9.3.3.9`\n- `lanscope_endpoint_manager >= 9.4.0.0, < 9.4.0.5`\n- `lanscope_endpoint_manager >= 9.4.1.0, < 9.4.1.5`\n- `lanscope_endpoint_manager >= 9.4.2.0, < 9.4.2.6`\n- `lanscope_endpoint_manager >= 9.4.3.0, < 9.4.3.8`\n- `lanscope_endpoint_manager >= 9.4.4.0, < 9.4.4.6`\n- `lanscope_endpoint_manager >= 9.4.5.0, < 9.4.5.4`\n- `lanscope_endpoint_manager >= 9.4.6.0, < 9.4.6.3`\n- `lanscope_endpoint_manager >= 9.4.7.0, <= 9.4.7.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `lanscope_endpoint_manager 9.4.6.3`","depth":"hadal","depthScore":79,"depthScoreParts":{"impact":53.9,"likelihood":0.6,"exploitation":25,"ransomware":0},"changes":[]}