SenseLive X3050 Embedded Management Service Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the SenseLive X3050's embedded management service. This vulnerability allows full administrative control to be established on the SenseLive config application without any authentication or authorization. The management service accepts connections from any reachable host, enabling unrestricted modification of critical configuration parameters, operational modes, and device state through a vendor-supplied or compatible client.

Impact

Exploitation of this vulnerability could allow an attacker to gain complete control over the affected device.

Remediation

SenseLive did not respond to CISA's requests to coordinate. Affected users are encouraged to reach out to SenseLive for more information.