What’s Vulnerable › Vulnerabilities

CVE-2025-15114: Ksenia Security lares Home Automation 1.6 PIN Exposure Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-06-17
• Weakness: CWE-403

Description

Ksenia Security lares (legacy model) Home Automation version 1.6 contains a critical security flaw that exposes the alarm system PIN in the 'basisInfo' XML file after authentication. Attackers can retrieve the PIN from the server response to bypass security measures and disable the alarm system without additional authentication.

Affected products

• Ksenia Security S.p.A. lares: 1.6

References

• https://www.vulncheck.com/advisories/ksenia-security-lares-home-automation-pin-exposure-vulnerability
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5929.php
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5929.php

Get alerted when CVE-2025-15114 or the next vulnerability affects your stack