LANSCOPE Endpoint Manager Flaw Allows Remote Code Execution

A critical security flaw has been found in the on-premise edition of LANSCOPE Endpoint Manager that could let attackers run malicious code on vulnerable machines. The vulnerability, tracked as CVE-2025-61932, involves a remote code execution issue in two core components: the Client Program (MR) and the Detection Agent (DA), affecting version 9.4.7.1 and earlier. Evidence shows that some customer networks have already received malicious packets exploiting this flaw, and the attack does not require user interaction.

An emergency CVSS 3.0 score of 9.8 has been assigned, placing the flaw in the emergency category due to its potential impact and ease of exploitation, with Cloud Edition users reportedly unaffected. A security update is now available on the official LANSCOPE support portal, and since the flaw resides in client-side software, every client PC running the on-premise edition must be updated using the same patch procedure as a regular software upgrade.