Categories: Cyber Security News

LANSCOPE Endpoint Manager Vulnerability Allows Attackers to Execute Remote Code

A critical remote code execution vulnerability has been discovered in the on-premise edition of LANSCOPE Endpoint Manager that allows unauthenticated attackers to run arbitrary commands with high privileges on affected systems.

Tracked as CVE-2025-61932, the flaw impacts both the Client Program (MR) and the Detection Agent (DA) in version 9.4.7.1 and earlier.

Real-world exploit attempts have already been observed, making prompt patching imperative.

Table of Contents

Toggle

Vulnerability Details

Security researchers found that specially crafted network packets sent to computers running the vulnerable on-premise software trigger a severe error in the MR client and DA detection agent.

This error bypasses all user interaction requirements no clicks or email openings are needed granting attackers direct, high-privilege code execution on target machines.

Evidence indicates that malicious packets exploiting this weakness have been delivered to customer networks in live environments.

Only the On-Premise Edition of LANSCOPE Endpoint Manager is affected; the Cloud Edition remains unaffected.

Both core components, Client Program (MR) and Detection Agent (DA), in version 9.4.7.1 and earlier, contain the vulnerability.

Organizations using the on-premise solution face an immediate risk until they apply the update.

CVE Summary Table

CVE ID	Product	CVSS 3.0 Score
CVE-2025-61932	LANSCOPE Endpoint Manager On-Premise Edition	9.8

Ensure all on-premise client PCs are updated without delay to eliminate the exploitation window presented by this severe flaw.

Cyber Awareness Month Offer: Upskill With 100+ Premium Cybersecurity Courses From EHA's Diamond Membership: Join Today

The post LANSCOPE Endpoint Manager Vulnerability Allows Attackers to Execute Remote Code appeared first on Cyber Security News.

LANSCOPE Endpoint Manager Vulnerability Let Attackers Execute Remote Code

Motex has disclosed a severe remote code execution vulnerability in its LANSCOPE Endpoint Manager On-Premise Edition. Assigned CVE-2025-61932, the flaw carries a CVSS 3.0 score of 9.8, classifying it as an emergency-level threat. This vulnerability could allow attackers to execute arbitrary code on affected systems, potentially leading to full compromise…

October 21, 2025

In "Cyber Security News"

LANSCOPE Endpoint Manager Zero Day Vulnerability Exploited by Threat Actors to Steal Data

October 31, 2025

In "Cyber Security News"

Threat Actors Exploit LANSCOPE Endpoint Manager Zero-Day Vulnerability to Steal Confidential Data

In mid-2025, researchers discovered a sophisticated campaign orchestrated by the Chinese state-sponsored threat group BRONZE BUTLER (also known as Tick) targeting organizations relying on Motex LANSCOPE Endpoint Manager. The attackers exploited a previously unknown zero-day vulnerability tracked as CVE-2025-61932, which grants remote adversaries the ability to execute arbitrary commands with…

October 31, 2025

In "Cyber Security News"

rssfeeds-admin