Path traversal vulnerability exists in Lanscope Endpoint Manager (On-Premises) Sub-Manager Server Ver.9.4.7.3 and earlier, which may allow an attacker to tamper with arbitrary files and execute arbitrary code on the affected system.
Vendor
MOTEX Inc. vulnerabilities
4 published CVES affecting MOTEX Inc., from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 4
- Critical
- 2
- High
- 1
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 1
Products
- lanscope endpoint manager 2
- lanscope an 1
- lanscope cat client program 1
- lanscope cat detection agent 1
- lanscope cat server monitoring agent 1
- Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) 1
- Lanscope Endpoint Manager (On-Premises) Sub-Manager Server 1
- LANSCOPE EndpointManager WebFiltering 1
Latest MOTEX Inc. CVEs
Newest publication first
-
CriticalCVSS 9.3 EPSS 0.60%
-
CriticalCVSS 9.3 EPSS 2.8% CISA KEV added 2025-10-22 Exploited in the wild
Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.
-
MediumCVSS 6.5 EPSS 0.32%
Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged...
-
HighCVSS 7.8 EPSS 0.42%
Privilege escalation vulnerability in Multiple MOTEX products (LanScope Cat client program (MR) and LanScope Cat client program (MR)LanScope Cat detection agent (DA) prior to Ver.9.2.1.0, LanScope Cat server monitoring agent (SA, SAE) prior to Ver.9.2.2.0, LanScope An prior to Ve...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.