This vulnerability in SenseLive X3050 (version V1.523) involves missing authorization controls (CWE-862) in the device's web management interface. It permits unauthorized modification of critical system and network configuration parameters without adequate validation or safety controls. Parameters affected include IP addressing, watchdog timers, reconnect intervals, and service ports, which are essential for device stability and recovery. Improper changes to these parameters can cause device instability or persistent unavailability. The CVSS 4.0 base score is 7.2, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on integrity and availability. No vendor patch or official remediation level is currently documented.

The vulnerability allows an attacker with network access and low privileges to modify critical configuration parameters without proper authorization. This can result in destabilization of the device or persistent denial of service by setting unsafe or unsupported values for core system functions. The impact affects device integrity and availability, potentially disrupting network operations relying on the device.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the device's management interface to trusted administrators only. Monitor for unauthorized configuration changes and consider implementing compensating controls such as network segmentation or access control lists to limit exposure.