9.3
/ 10
CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
Ksenia Security Lares 4.0 Home Automation version 1.6 contains a default credentials vulnerability that allows unauthorized attackers to gain administrative access. Attackers can exploit the weak default administrative credentials to obtain full control of the home automation system.
AI Analysis
Default credentials vulnerability allowing unauthorized administrative access
Basic Information
ID
CVE-2025-15111
Source
VulnCheck
Published
Dec 30, 2025 at 22:41
Affected Product
Vendor
Ksenia Security S.p.A.
Product
Ksenia Security Lares 4.0 Home Automation
Version
1.6
Affected Versions
Ksenia Security S.p.A. Ksenia Security Lares 4.0 Home Automation 1.6
Ksenia Security S.p.A. Ksenia Security Lares 4.0 Home Automation 1.0.0.15
Ksenia Security S.p.A. Ksenia Security Lares 4.0 Home Automation 1.0.0.15
CWE Classification
AI Assessment
AI Score
9.3 / 10
AI Severity
Critical
Vendor
Ksenia Security S.p.A.
Product
Ksenia Security Lares 4.0 Home Automation
Version
1.6