SenseLive X3050 Unauthenticated Device Discovery Vulnerability

A vulnerability in the SenseLive X3050 management ecosystem allows for the unauthenticated discovery of deployed units via the vendor's management protocol. This exposure enables the identification of device presence, unique identifiers, and management interfaces without the need for credentials. The discovery functions are accessible through the underlying service without authentication, allowing an attacker on the same network segment to quickly enumerate targeted devices.

Impact

Exploitation of this vulnerability could lead to unauthorized discovery and enumeration of devices, including their management interfaces and identifiers.

Remediation

SenseLive has not responded to CISA's requests for coordination. Affected users are encouraged to contact SenseLive for more information.