SenseLive X3050 Web Management Interface Improper Session Lifetime Vulnerability

A vulnerability in the SenseLive X3050 web management interface allows authenticated sessions to remain active for extended periods without requiring re-authentication. This improper session lifetime enforcement could enable an attacker with access to a previously authenticated session to interact with administrative functions long after legitimate user activity has ceased.

Impact

Successful exploitation could allow an attacker to take complete control of the device.

Remediation

SenseLive did not respond to CISA's requests to coordinate. Affected users are encouraged to reach out to SenseLive for more information.