ACTIEF MISBRUIKT
CVE-2025-61932: Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
| Leverancier | Motex |
|---|---|
| Product | LANSCOPE Endpoint Manager |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 22 okt 2025 |
| CISA-deadline (Amerikaanse overheid) | 12 nov 2025 |
| Zwakte (CWE) | CWE-940 |
Vereiste actie (tekst van CISA, Engels)
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Beschrijving (NVD, Engels)
Motex LANSCOPE Endpoint Manager contains an improper verification of source of a communication channel vulnerability allowing an attacker to execute arbitrary code by sending specially crafted packets.
BRONNEN
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.