This vulnerability (CWE-306) in SenseLive X3050 version V1.523 allows unauthenticated attackers to change critical configuration parameters via the web management interface due to missing authentication and insufficient server-side validation. Attackers can induce a persistent lockout state by setting unsupported or disruptive values affecting recovery mechanisms and network settings. Because the device has no physical reset button, recovery necessitates specialized technical access through the console to perform a factory reset, causing a complete denial-of-service impacting the gateway and connected RS-485 systems. The CVSS 4.0 base score is 9.2, reflecting critical severity with network attack vector, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation results in a total denial-of-service condition for the SenseLive X3050 gateway and its connected RS-485 downstream systems. The attacker can lock out legitimate users persistently by modifying critical configuration parameters without authentication. Recovery is complex and requires specialized console access to perform a factory reset due to the absence of a physical reset button, increasing operational impact and downtime.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is currently documented. Until a patch or official mitigation is available, restrict access to the device's web management interface to trusted networks and users only. Monitor for unauthorized configuration changes and prepare for manual recovery via console access if lockout occurs.