Cybersecurity & Infrastructure Security Agency (CISA) Archives

Hackers are taking advantage of a serious flaw in the Motex Landscope Endpoint Manager, according to a warning from the Cybersecurity & Infrastructure Security Agency (CISA). The vulnerability has a critical severity level of 9.3 and is listed as CVE-2025-61932. It results from incorrectly confirming the source of incoming requests, and an unauthenticated attacker might use it to send specially constructed packets that would cause the system to run arbitrary code. Lanscope Endpoint Manager is an endpoint management and security solution that offers unified control across desktop and mobile devices. It was created by the Japanese company Motex, a division of Kyocera Communication Systems. AWS (Amazon Web Services) offers the product as an asset/endpoint management alternative,...

A significant OS command injection that affects Progress Kemp LoadMaster is one of three new vulnerabilities that the U.S. Cybersecurity & Infrastructure Security Agency (CISA) has added to its list of known exploited vulnerabilities (KEVs). The vulnerability was fixed in an update published on February 21, 2024, after being identified by Rhino Security Labs and recorded as CVE-2024-1212. But this is the first time that its active exploitation in the wild has been documented. The description of the bug states, "Progress Kemp LoadMaster has an OS command injection vulnerability that permits arbitrary system command execution by granting an unauthenticated, remote attacker access to the system via the LoadMaster management interface read more about CISA tags Progress Kemp LoadMast...

Tag: Cybersecurity & Infrastructure Security Agency (CISA)

CISA warns of Lanscope Endpoint Manager flaw exploited in attacks

CISA tags Progress Kemp LoadMaster flaw as exploited in attacks