Ksenia Security S.p.A. vulnerabilities
We track 3 vulnerabilities in Ksenia Security S.p.A. products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 30, 2025.
Latest Ksenia Security S.p.A. vulnerabilities
- 9.8 Critical severity
lares: Exposure of Resource to Wrong Sphere
Ksenia Security lares (legacy model) Home Automation version 1.6 contains a critical security flaw that exposes the alarm system PIN in the 'basisInfo' XML file after authentication. Attackers can retrieve the PIN from the server response to bypass security me
- 9.8 Critical severity
lares: Insufficiently Protected Credentials
Ksenia Security lares (legacy model) Home Automation version 1.6 contains an unprotected endpoint vulnerability that allows authenticated attackers to upload MPFS File System binary images. Attackers can exploit this vulnerability to overwrite flash program me
- 9.8 Critical severity
lares: Use of Hard-coded Password
Ksenia Security lares (legacy model) version 1.6 contains a default credentials vulnerability that allows unauthorized attackers to gain administrative access. Attackers can exploit the weak default administrative credentials to obtain full control of the home