Lucene search
+L

85 matches found

CNNVD
CNNVD
added 2026/04/24 12:00 a.m.15 views

SenseLive X3050 访问控制错误漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a access control vulnerability, which stems from the exposure of management protocols via the discovery function. This vulnerability could allo...

8.7CVSS5.8AI score0.00462EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.13 views

SenseLive X3050 跨站请求伪造漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a cross-site request forgeing vulnerability. This vulnerability arises from the lack of protection against cross-site request forgeing in the w...

8.4CVSS5.7AI score0.00162EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.11 views

PT-2026-34810

Name of the Vulnerable Software and Affected Versions SenseLive X3050 affected versions not specified Description The embedded management service in the SenseLive config application lacks authentication and authorization. This allows any reachable host to establish full administrative control and...

9.8CVSS5.3AI score0.00546EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.19 views

PT-2026-34806

A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and management interfaces without requiring credentials. Because discovery functions are...

8.7CVSS5.8AI score0.00462EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.17 views

SenseLive X3050 安全漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a security vulnerability, which stems from the unreliable application of password updates. This vulnerability may cause the system to continue...

9.3CVSS5.8AI score0.00388EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.13 views

SenseLive X3050 访问控制错误漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a access control vulnerability, which stems from the lack of authentication or authorization in the embedded management services. This...

9.8CVSS5.8AI score0.00546EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.16 views

SenseLive X3050 安全漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a security vulnerability. This vulnerability stems from insufficient verification and security controls during modifications to critical system...

8.1CVSS5.8AI score0.00324EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.18 views

SenseLive X3050 访问控制错误漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a access control vulnerability. This vulnerability stems from the remote management service, which allows unauthorized or unauthorized users to...

9.8CVSS5.8AI score0.00405EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.19 views

SenseLive X3050 安全漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a security vulnerability, which stems from improper execution of access control mechanisms. This could allow attackers with network access righ...

9.8CVSS5.9AI score0.00727EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.15 views

SenseLive X3050 访问控制错误漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a access control vulnerability. This vulnerability stems from the Web management interface, which allows modification of critical configuration...

9.2CVSS5.8AI score0.00518EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.14 views

SenseLive X3050 安全漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a security vulnerability, which stems from its reliance on unencrypted HTTP for management communications. This vulnerability may allow attacke...

6.9CVSS5.8AI score0.0019EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.9 views

PT-2026-34801

A vulnerability in SenseLive X3050's web management interface allows state-changing operations to be triggered without proper Cross-Site Request Forgery CSRF protections. Because the application does not enforce server-side validation of request origin or implement CSRF tokens, a malicious extern...

8.4CVSS5.7AI score0.00162EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/04/23 11:58 p.m.8 views

CVE-2026-40623 SenseLive X3050 Missing Authorization

A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchd...

8.1CVSS5.3AI score0.00324EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/23 11:58 p.m.30 views

CVE-2026-40623

SenseLive X3050 is affected by a vulnerability in its web management interface where insufficient validation of sensitive configuration changes (e.g., IP addressing, watchdog timers, reconnect intervals, and service ports) allows an attacker to modify core behavior and recovery mechanisms. The un...

8.1CVSS5.7AI score0.00324EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/23 11:58 p.m.5 views

CVE-2026-40623

A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchd...

8.1CVSS5.7AI score0.00324EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/04/23 11:58 p.m.51 views

CVE-2026-40623 SenseLive X3050 Missing Authorization

A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchd...

8.1CVSS0.00324EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/23 11:56 p.m.40 views

CVE-2026-40431 SenseLive X3050 Cleartext transmission of sensitive information

A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication. Because management traffic, including authentication attempts and configuration data, is transmitted in cleartext, an attacker with access to the same...

6.9CVSS0.0019EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/23 11:56 p.m.7 views

CVE-2026-40431

A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication. Because management traffic, including authentication attempts and configuration data, is transmitted in cleartext, an attacker with access to the same...

6.9CVSS5.8AI score0.0019EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/23 11:56 p.m.5 views

CVE-2026-40431 SenseLive X3050 Cleartext transmission of sensitive information

A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication. Because management traffic, including authentication attempts and configuration data, is transmitted in cleartext, an attacker with access to the same...

6.9CVSS5.3AI score0.0019EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/23 11:56 p.m.27 views

CVE-2026-40431

SenseLive X3050 exposes management communications over unencrypted HTTP. The CVE-2026-40431 entry identifies cleartext transmission of authentication attempts and configuration data in the web management interface, enabling network-adjacent observers to intercept sensitive information. No explici...

6.9CVSS5.8AI score0.0019EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder