This vulnerability (CWE-306) in SenseLive X3050 version V1.523 involves missing authentication controls on critical functions within the device's web management interface. Attackers can modify configuration parameters without authentication, leading to a persistent lockout state that disables the device and its downstream RS-485 systems. Recovery is complicated by the absence of a physical reset button, requiring console access for a factory reset. The CVSS 4.0 score is 9.2 (critical), reflecting network attack vector, no privileges or user interaction required, but high impact on confidentiality and availability.

An attacker can cause a total denial-of-service on the SenseLive X3050 gateway and its connected RS-485 downstream systems by inducing a persistent lockout state through unauthenticated configuration changes. This disrupts critical industrial or network operations dependent on the device. Recovery is difficult and requires specialized technical access, increasing operational downtime and complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, operators should restrict network access to the device's management interface to trusted personnel only and monitor for unauthorized configuration changes. Physical security and console access controls should be enforced to prevent unauthorized factory resets.