This vulnerability in SenseLive X3050 (version V1.523) involves missing authorization enforcement in the device's web management interface. Attackers with low privileges can modify critical configuration parameters without proper validation or safety controls. Parameters affected include IP addressing, watchdog timers, reconnect intervals, and service ports, which are essential for device behavior and recovery. The lack of constraints allows unsafe values to be set, potentially destabilizing the device or rendering it persistently unavailable. The CVSS 4.0 base score is 7.2 (high severity), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on integrity and availability. No known exploits are reported in the wild, and no official remediation or patch is currently documented.

An attacker with network access and low privileges can alter critical system and network configuration parameters without proper authorization. This can lead to destabilization of device operation or persistent unavailability, impacting the integrity and availability of the device. The vulnerability affects core device behavior and recovery mechanisms, potentially causing denial of service or operational disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the device's management interface to trusted administrators only. Monitor for unauthorized configuration changes and consider additional access controls or network segmentation to limit exposure.