CVE ID
CVE-2025-61932
Vulnerability Name
Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
- Project: Motex
- Product: LANSCOPE Endpoint Manager
Date
- Date Added: 2025-10-22
- Due Date: 2025-11-12
Description
Motex LANSCOPE Endpoint Manager contains an improper verification of source of a communication channel vulnerability allowing an attacker to execute arbitrary code by sending specially crafted packets.
Known To Be Used in Ransomware Campaigns?
Unknown
Action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Additional Notes
https://www.motex.co.jp/news/notice/2025/release251020/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-61932
Related Security News
- China-linked hackers exploited Lanscope flaw as a zero-day in attacks
- China-Linked Tick Group Exploits Lanscope Zero-Day to Hijack Corporate Systems
- CISA warns of Lanscope Endpoint Manager flaw exploited in attacks
- Critical Lanscope Endpoint Manager Bug Exploited in Ongoing Cyberattacks, CISA Confirms