Lucene search
+L

84 matches found

Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.20 views

PT-2026-34806

A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and management interfaces without requiring credentials. Because discovery functions are...

8.7CVSS5.8AI score0.00462EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.21 views

SenseLive X3050 信任管理问题漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a trust management vulnerability. This vulnerability stems from the fact that the authentication logic in the web management interface is...

9.8CVSS5.8AI score0.00548EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.18 views

SenseLive X3050 代码问题漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a code vulnerability that stems from improper execution of the Web management interface’s session lifecycle. This issue allows authenticated...

6.9CVSS6AI score0.00283EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.13 views

PT-2026-34810

Name of the Vulnerable Software and Affected Versions SenseLive X3050 affected versions not specified Description The embedded management service in the SenseLive config application lacks authentication and authorization. This allows any reachable host to establish full administrative control and...

9.8CVSS5.3AI score0.00546EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.25 views

PT-2026-34800

Name of the Vulnerable Software and Affected Versions SenseLive X3050 affected versions not specified Description A flaw in the remote management service allows firmware retrieval and update operations to be performed without authentication or authorization. The service accepts firmware-related...

9.8CVSS5.9AI score0.00405EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.18 views

SenseLive X3050 安全漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a security vulnerability, which stems from the unreliable application of password updates. This vulnerability may cause the system to continue...

9.3CVSS5.8AI score0.00388EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.16 views

SenseLive X3050 安全漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a security vulnerability. This vulnerability stems from insufficient verification and security controls during modifications to critical system...

8.1CVSS5.8AI score0.00324EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.19 views

SenseLive X3050 安全漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a security vulnerability, which stems from improper execution of access control mechanisms. This could allow attackers with network access righ...

9.8CVSS5.9AI score0.00727EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.15 views

SenseLive X3050 访问控制错误漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a access control vulnerability. This vulnerability stems from the Web management interface, which allows modification of critical configuration...

9.2CVSS5.8AI score0.00518EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.14 views

SenseLive X3050 安全漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a security vulnerability, which stems from its reliance on unencrypted HTTP for management communications. This vulnerability may allow attacke...

6.9CVSS5.8AI score0.0019EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.19 views

SenseLive X3050 访问控制错误漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a access control vulnerability. This vulnerability stems from the remote management service, which allows unauthorized or unauthorized users to...

9.8CVSS5.8AI score0.00405EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.10 views

PT-2026-34801

A vulnerability in SenseLive X3050's web management interface allows state-changing operations to be triggered without proper Cross-Site Request Forgery CSRF protections. Because the application does not enforce server-side validation of request origin or implement CSRF tokens, a malicious extern...

8.4CVSS5.7AI score0.00162EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.14 views

SenseLive X3050 访问控制错误漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a access control vulnerability, which stems from the lack of authentication or authorization in the embedded management services. This...

9.8CVSS5.8AI score0.00546EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/23 11:58 p.m.8 views

CVE-2026-40623 SenseLive X3050 Missing Authorization

A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchd...

8.1CVSS5.3AI score0.00324EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/23 11:58 p.m.31 views

CVE-2026-40623

SenseLive X3050 is affected by a vulnerability in its web management interface where insufficient validation of sensitive configuration changes (e.g., IP addressing, watchdog timers, reconnect intervals, and service ports) allows an attacker to modify core behavior and recovery mechanisms. The un...

8.1CVSS5.7AI score0.00324EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/23 11:58 p.m.5 views

CVE-2026-40623

A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchd...

8.1CVSS5.7AI score0.00324EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/04/23 11:58 p.m.52 views

CVE-2026-40623 SenseLive X3050 Missing Authorization

A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchd...

8.1CVSS0.00324EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/23 11:56 p.m.40 views

CVE-2026-40431 SenseLive X3050 Cleartext transmission of sensitive information

A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication. Because management traffic, including authentication attempts and configuration data, is transmitted in cleartext, an attacker with access to the same...

6.9CVSS0.0019EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/23 11:56 p.m.7 views

CVE-2026-40431

A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication. Because management traffic, including authentication attempts and configuration data, is transmitted in cleartext, an attacker with access to the same...

6.9CVSS5.8AI score0.0019EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/23 11:56 p.m.5 views

CVE-2026-40431 SenseLive X3050 Cleartext transmission of sensitive information

A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication. Because management traffic, including authentication attempts and configuration data, is transmitted in cleartext, an attacker with access to the same...

6.9CVSS5.3AI score0.0019EPSS
SaveExploits0References3
Rows per page
Query Builder