CVE-2025-61932: lanscope endpoint manager before 9.3.2.7 (exclusive), from 9.3.3.0 (inclusive), before 9.3.3.9 (exclusive), from…

Affected technology

lanscope endpoint manager · before 9.3.2.7 (exclusive)
motex

lanscope endpoint manager · from 9.3.3.0 (inclusive), before 9.3.3.9 (exclusive)
motex

lanscope endpoint manager · from 9.4.0.0 (inclusive), before 9.4.0.5 (exclusive)
motex

lanscope endpoint manager · from 9.4.1.0 (inclusive), before 9.4.1.5 (exclusive)
motex

lanscope endpoint manager · from 9.4.2.0 (inclusive), before 9.4.2.6 (exclusive)
motex

lanscope endpoint manager · from 9.4.3.0 (inclusive), before 9.4.3.8 (exclusive)
motex

lanscope endpoint manager · from 9.4.4.0 (inclusive), before 9.4.4.6 (exclusive)
motex

lanscope endpoint manager · from 9.4.5.0 (inclusive), before 9.4.5.4 (exclusive)
motex

lanscope endpoint manager · from 9.4.6.0 (inclusive), before 9.4.6.3 (exclusive)
motex

lanscope endpoint manager · from 9.4.7.0 (inclusive), through 9.4.7.1 (inclusive)
motex

Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) · Ver.9.4.7.1 and earlier
MOTEX Inc.

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An attacker can execute arbitrary code by sending specially crafted packets. Vendor/CNA’s CVSS 4.0 assessment (base score 9.3/10) rates confidentiality, integrity and availability impact as high.