SenseLive X3050 version V1.523 contains a session management vulnerability (CWE-613) where the web management interface does not properly enforce session lifetime expiration. Authenticated sessions can persist longer than intended, potentially allowing unauthorized continued access if an attacker gains control of a valid session token. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low complexity, no privileges or user interaction required, and limited confidentiality and integrity impact.

An attacker who obtains a previously authenticated session could maintain access to administrative functions on the SenseLive X3050 device beyond the normal session expiration period. This could lead to unauthorized administrative actions if session tokens are compromised or left active. However, the vulnerability does not require privileges or user interaction to exploit and has limited impact on confidentiality and integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should consider manual session management controls such as enforcing shorter session timeouts via configuration if possible, and ensuring session tokens are protected from unauthorized access. Monitor for vendor updates regarding patches or official mitigations.