kseniasecurity lares firmware

Name: kseniasecurity lares firmware
Brand: kseniasecurity

productUS

cpe:2.3:o:kseniasecurity:lares_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical0high0medium0low

updated 2026-10-28

vulnerabilities (4)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-15111US	—OT elevated	0.58% (47th)	—	no fix	2025-12-30	= 1.6
CVE-2025-15114US	—	0.55% (46th)	—	no fix	2025-12-30	= 1.6
CVE-2025-15113US	—	0.47% (41st)	—	no fix	2025-12-30	= 1.6
CVE-2025-15112US	—	0.26% (18th)	—	no fix	2025-12-30	= 1.6

The flaw types (CWEs) most of these CVEs share.

CWE-256Plaintext Storage of a Password1 CVEs
CWE-259Use of Hard-coded Password1 CVEs
CWE-403Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')1 CVEs
CWE-522Insufficiently Protected Credentials1 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')1 CVEs
CWE-668Exposure of Resource to Wrong Sphere1 CVEs
CWE-798Use of Hard-coded Credentials1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.