Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Ksenia Security S.p.A. Clear all filters
TI-2025-13792 CVE-2025-15114 · GHSA-5xw5-83cp-4rjf

Ksenia Security lares Home Automation 1.6 PIN Exposure Vulnerability

Priority HIGH 81

Ksenia Security lares (legacy model) Home Automation version 1.6 contains a critical security flaw that exposes the alarm system PIN in the 'basisInfo' XML file after authentication.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00549 Published 2025-12-30 No fix listed CWE-403
TI-2025-13790 CVE-2025-15112 · GHSA-x5cr-w4x6-22r9

Ksenia Security lares Home Automation 1.6 URL Redirection Vulnerability

Priority MEDIUM 56

Ksenia Security lares (legacy model) version 1.6 contains a URL redirection vulnerability in the 'cmdOk.xml' script that allows attackers to manipulate the 'redirectPage' GET parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00261 Published 2025-12-30 No fix listed CWE-601