CVE 9.3 CRITICAL

Ksenia Security Lares 4.0 Home Automation 1.6 Default Credentials Vulnerability_CVE-2025-15111

9.3 / 10
CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

Ksenia Security Lares 4.0 Home Automation version 1.6 contains a default credentials vulnerability that allows unauthorized attackers to gain administrative access. Attackers can exploit the weak default administrative credentials to obtain full control of the home automation system.

AI Analysis

Default credentials vulnerability allowing unauthorized administrative access

Basic Information

ID CVE-2025-15111
Source VulnCheck
Published Dec 30, 2025 at 22:41

Affected Product

Vendor Ksenia Security S.p.A.
Product Ksenia Security Lares 4.0 Home Automation
Version 1.6
Affected Versions Ksenia Security S.p.A. Ksenia Security Lares 4.0 Home Automation 1.6
Ksenia Security S.p.A. Ksenia Security Lares 4.0 Home Automation 1.0.0.15

CWE Classification

AI Assessment

AI Score 9.3 / 10
AI Severity Critical
Vendor Ksenia Security S.p.A.
Product Ksenia Security Lares 4.0 Home Automation
Version 1.6

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.