SenseLive X3050 version V1.523 contains a vulnerability classified as CWE-613 (Insufficient Session Expiration) in its web management interface. This flaw allows authenticated sessions to persist longer than intended without re-authentication, potentially enabling unauthorized continued access if an attacker gains control of a session token. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low complexity, and no privileges or user interaction required. No vendor advisory or patch information is currently available.

An attacker who obtains access to a previously authenticated session can maintain administrative access to the SenseLive X3050 device beyond the legitimate user's session duration. This could lead to unauthorized configuration changes or management actions. However, exploitation requires prior session access, and no known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider limiting access to the management interface, using network controls to restrict session exposure, and enforcing manual session termination where possible.