CVE-2025-61932

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 1/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Motex LANSCOPE Endpoint Manager contains an improper verification of source of a communication channel vulnerability allowing an attacker to execute arbitrary code by sending specially crafted packets.

CISA Known Exploited Vulnerability

Vendor / Product Motex — LANSCOPE Endpoint Manager
Date Added 2025-10-22
Remediation Due 2025-11-12
https://www.motex.co.jp/news/notice/2025/release251020/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-61932

Weakness Classification (1)

Affected Software (10)

VendorProductVersion
motex lanscope_endpoint_manager < 9.3.2.7
motex lanscope_endpoint_manager 9.3.3.0 – 9.3.3.9
motex lanscope_endpoint_manager 9.4.0.0 – 9.4.0.5
motex lanscope_endpoint_manager 9.4.1.0 – 9.4.1.5
motex lanscope_endpoint_manager 9.4.2.0 – 9.4.2.6
motex lanscope_endpoint_manager 9.4.3.0 – 9.4.3.8
motex lanscope_endpoint_manager 9.4.4.0 – 9.4.4.6
motex lanscope_endpoint_manager 9.4.5.0 – 9.4.5.4
motex lanscope_endpoint_manager 9.4.6.0 – 9.4.6.3
motex lanscope_endpoint_manager 9.4.7.0 – 9.4.7.1

Bug Bounty Relevance

1 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

2.77%
Raw Score 0.027680
Percentile 86.3%
Date 2026-10-28

Intelligence Sources

kev ref →