SenseLive X3050 Password Update Vulnerability in Web Management Interface

A vulnerability in the web management interface of the SenseLive X3050 device allows for unreliable password updates. This issue arises from improper handling of credential changes on the backend. After a factory restore using the SenseLive Config 2.0 tool, the interface may falsely indicate a successful password update, while the system continues to accept previous or default credentials. Even post-factory reset, password change attempts may not be properly applied.

Impact

Exploitation of this vulnerability could lead to unauthorized access, as the device may continue to accept default or previously set passwords despite indications that a change was successfully made.

Remediation

SenseLive did not respond to CISA's requests to coordinate. Affected users are encouraged to reach out to SenseLive for more information.