CVE-2025-61932 Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel
Attackers can execute arbitrary code on Lanscope Endpoint Manager by sending crafted packets due to improper origin verification.
- Exploited in the wild
- Since 22 Oct 2025
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-61932?
CVE-2025-61932 is a critical code injection vulnerability in MOTEX Inc. Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)), published on 20 Oct 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.
Weakness: CWE-940
Which versions are affected by CVE-2025-61932?
It affects 1 product.
Products include Motex Lanscope Endpoint Manager.
How do I fix CVE-2025-61932?
No fix has been published for CVE-2025-61932 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 12 Nov 2025.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2025-61932 being exploited?
Yes. Attackers have exploited CVE-2025-61932 in the wild since at least 22 Oct 2025.
Other vulnerabilities in MOTEX Inc. Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA))
Sources
Also known as GHSA-g3v5-cgpf-rr2h.