cve.bz

CVE-2025-15113

9.3 criticalEPSS 0.5%

Critical (9.3) in kseniasecurity lares firmware. EPSS 0.5% chance of exploitation in the next 30 days.

Ksenia Security lares (legacy model) Home Automation version 1.6 contains an unprotected endpoint vulnerability that allows authenticated attackers to upload MPFS File System binary images. Attackers can exploit this vulnerability to overwrite flash program memory and potentially execute arbitrary code on the home automation system's web server.

Severity

CVSS 3.1

9.3 critical
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWEs
CWE-256, CWE-522
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON