CVE-2025-15113

KRITISCH 9.3CVE-2025-15113 · Published 30/12/2025 · updated 17/06/2026

Kurz gesagt

CVE-2025-15113 ist eine Schwachstelle (KRITISCH (CVSS 9.3)).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.47%, höher als bei 40.7% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Ksenia Security lares (legacy model) Home Automation version 1.6 contains an unprotected endpoint vulnerability that allows authenticated attackers to upload MPFS File System binary images. Attackers can exploit this vulnerability to overwrite flash program memory and potentially execute arbitrary code on the home automation system's web server.

References

packetstorm.news/files/id/190178 · Third Party Advisory
kseniasecurity.com · Product
vulncheck.com/advisories/ksenia-security-lares-home-automation-remote-code-execution-via-mpfs-upload · Third Party Advisory
zeroscience.mk/en/vulnerabilities/ZSL-2025-5930.php · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free