SenseLive X3050 Web Management Interface Cleartext Transmission Vulnerability

A vulnerability exists in the SenseLive X3050 web management interface because it uses unencrypted HTTP for all administrative communications. This flaw allows an attacker on the same network segment to intercept sensitive information, including authentication data and configuration details. The issue affects SenseLive X3050 version 1.523.

Impact

Exploitation of this vulnerability could lead to interception of sensitive operational information, including authentication attempts and configuration data, allowing an attacker to observe or capture this information in cleartext.

Remediation

SenseLive did not respond to CISA's requests to coordinate. Affected users are encouraged to contact SenseLive for more information.