Ksenia Security · Ksenia Security Lares 4.0 Home Automation · CVE-2025-15114
**Name of the Vulnerable Software and Affected Versions**
Ksenia Security Lares 4.0 Home Automation version 1.6
**Description**
A critical security flaw exists that exposes the alarm system PIN in the `basisInfo` XML file after authentication. An attacker can retrieve the PIN from the server response and bypass security measures to disable the alarm system without further authentication. The affected system is a home automation system.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.