Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-15111

Ksenia Security lares Home Automation 1.6 Default Credentials Vulnerability

Description

Ksenia Security lares (legacy model) version 1.6 contains a default credentials vulnerability that allows unauthorized attackers to gain administrative access. Attackers can exploit the weak default administrative credentials to obtain full control of the home automation system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ksenia Security S.p.A. lares

Default version status: unaffected

  • 1.6affected
  • 1.0.0.15affected

References