Lares Firmware vulnerabilities

3 known vulnerabilities in Lares Firmware from Kseniasecurity. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  lares: Exposure of Resource to Wrong Sphere

  CVE-2025-15114Dec 30, 2025Ksenia Security S.p.A.

  Ksenia Security lares (legacy model) Home Automation version 1.6 contains a critical security flaw that exposes the alarm system PIN in the 'basisInfo' XML file after authentication. Attackers can retrieve the PIN from the server response to bypass security me

• 9.8 Critical severity

  lares: Insufficiently Protected Credentials

  CVE-2025-15113Dec 30, 2025Ksenia Security S.p.A.

  Ksenia Security lares (legacy model) Home Automation version 1.6 contains an unprotected endpoint vulnerability that allows authenticated attackers to upload MPFS File System binary images. Attackers can exploit this vulnerability to overwrite flash program me

• 9.8 Critical severity

  lares: Use of Hard-coded Password

  CVE-2025-15111Dec 30, 2025Ksenia Security S.p.A.

  Ksenia Security lares (legacy model) version 1.6 contains a default credentials vulnerability that allows unauthorized attackers to gain administrative access. Attackers can exploit the weak default administrative credentials to obtain full control of the home