Read the docs

Ksenia Security S.p.A.

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ksenia Security S.p.A. records in CISA KEV

No Ksenia Security S.p.A. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Lares Firmware 4 records HIGH

Records

4 records

TI-2025-13792 CVE-2025-15114 · GHSA-5xw5-83cp-4rjf

Ksenia Security lares Home Automation 1.6 PIN Exposure Vulnerability

Priority HIGH 81

Ksenia Security lares (legacy model) Home Automation version 1.6 contains a critical security flaw that exposes the alarm system PIN in the 'basisInfo' XML file after authentication.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00549 Published 2025-12-30 No fix listed CWE-403
TI-2025-13790 CVE-2025-15112 · GHSA-x5cr-w4x6-22r9

Ksenia Security lares Home Automation 1.6 URL Redirection Vulnerability

Priority MEDIUM 56

Ksenia Security lares (legacy model) version 1.6 contains a URL redirection vulnerability in the 'cmdOk.xml' script that allows attackers to manipulate the 'redirectPage' GET parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00261 Published 2025-12-30 No fix listed CWE-601
Open these records in search →