Urgent Patch: Critical Lanscope Endpoint Manager RCE (CVE-2025-61932, CVSS 9.8) Under Active Exploitation

According to JPCERT/CC, Lanscope Endpoint Manager (On-Premises) provided by MOTEX Inc. contains a vulnerability that leads to arbitrary code execution due to improper verification of source of a communication channel (CWE-940). The flaw, tracked as CVE-2025-61932 with a CVSS v3 score of 9.8 (Critical), affects the Client Program (MR) and Detection Agent (DA) components in versions 9.4.7.1 and earlier.

Exploitation requires no user interaction, and it is reportedly actively exploited in the wild, with at least one customer targeted, according to MOTEX. If successfully exploited, an attacker could execute malicious code with system-level privileges, potentially leading to network compromise, data theft, or ransomware deployment. MOTEX has released updated builds addressing CVE-2025-61932 and strongly urges all customers to update immediately, while interim workarounds are recommended until patches are deployed.