Description
Ksenia Security lares (legacy model) version 1.6 contains a default credentials vulnerability that allows unauthorized attackers to gain administrative access. Attackers can exploit the weak default administrative credentials to obtain full control of the home automation system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ksenia Security S.p.A. | lares | 1.6, 1.0.0.15 | — |
References
- Zero Science Lab Disclosure (ZSL-2025-5927) third-party-advisory
- Packet Storm Security Exploit Entry exploit
- Ksenia Security Vendor Homepage product
- https://www.vulncheck.com/advisories/ksenia-security-lares-home-automation-default-credentials-vulnerability third-party-advisory