Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g772-q552-ggr6

Опубликовано: 31 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 7.8

Описание

Ksenia Security Lares 4.0 Home Automation version 1.6 contains an unprotected endpoint vulnerability that allows authenticated attackers to upload MPFS File System binary images. Attackers can exploit this vulnerability to overwrite flash program memory and potentially execute arbitrary code on the home automation system's web server.

Ksenia Security Lares 4.0 Home Automation version 1.6 contains an unprotected endpoint vulnerability that allows authenticated attackers to upload MPFS File System binary images. Attackers can exploit this vulnerability to overwrite flash program memory and potentially execute arbitrary code on the home automation system's web server.

EPSS

Процентиль: 21%
0.00069
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-256
CWE-522

Связанные уязвимости

CVSS3: 9.3
nvd
около 1 месяца назад

Ksenia Security Lares 4.0 Home Automation version 1.6 contains an unprotected endpoint vulnerability that allows authenticated attackers to upload MPFS File System binary images. Attackers can exploit this vulnerability to overwrite flash program memory and potentially execute arbitrary code on the home automation system's web server.

EPSS

Процентиль: 21%
0.00069
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-256
CWE-522