PT-2025-54259 · Ksenia Security · Ksenia Security Lares 4.0 Home Automation

Mencha Isajlovska · Published 2024-07-03 · Updated 2026-03-11 · CVE-2025-15111

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ksenia Security Lares 4.0 Home Automation version 1.6

Description Ksenia Security Lares 4.0 Home Automation version 1.6 has a default credentials issue that allows unauthorized access to administrative functions. Successful exploitation grants attackers full control of the home automation system.

Recommendations Change the default administrative credentials.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-259

CWE-798

Related Identifiers

BDU:2026-00331

CVE-2025-15111

Affected Products

Ksenia Security Lares 4.0 Home Automation

References · 12

• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2025-5927.php · Exploit
• 🔥 https://packetstorm.news/files/id/190180 · Exploit
• https://bdu.fstec.ru/vul/2026-00331 · Security Note
• https://osv.dev/vulnerability/CVE-2025-15111 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-15111 · Security Note
• https://t.me/CVEtracker/41015 · Telegram Post
• https://t.me/cveNotify/155168 · Telegram Post
• https://twitter.com/CVEnew/status/2006332235486769251 · Twitter Post
• https://twitter.com/0dayPublishing/status/2012245024524599546 · Twitter Post
• https://vulncheck.com/advisories/ksenia-security-lares-home-automation-default-credentials-vulnerability · Note
• https://kseniasecurity.com · Note
• https://t.me/cveNotify/152505 · Telegram Post