Lanscope Endpoint Manager vulnerabilities
2 known vulnerabilities in Lanscope Endpoint Manager from MOTEX. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
2critical
0high
1exploited
9.3average CVSS score
Latest first
- 9.3 Critical severity
Lanscope Endpoint Manager (On-Premises)…: Improper Limitation of a Pathname to a Restricted Directory
Path traversal vulnerability exists in Lanscope Endpoint Manager (On-Premises) Sub-Manager Server Ver.9.4.7.3 and earlier, which may allow an attacker to tamper with arbitrary files and execute arbitrary code on the affected system.
- 9.3 Critical severity
Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Exploited
Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.