CVE-2026-40623 Details
Description
A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchdog timers, reconnect intervals, and service ports can be set to unsupported or unsafe values. These configuration changes directly affect core device behaviour and recovery mechanisms. The lack of proper validation and safeguards allows critical system functions to be altered in a manner that can destabilize device operation or render the device persistently unavailable.
A vulnerability exists in the web management interface of the SenseLive X3050 device, allowing critical system and network configuration parameters to be altered without adequate validation or safety controls. This flaw enables the modification of essential settings such as IP addresses, watchdog timers, reconnect intervals, and service ports, potentially leading to unsupported or unsafe values. These unauthorized changes can disrupt core device functions and recovery mechanisms, causing instability or making the device persistently unavailable.
SenseLive has not responded to CISA's requests for coordination. Affected users are encouraged to contact SenseLive for more information.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 24, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json | [email protected] | Third Party Advisory |
| https://senselive.io/contact | [email protected] | Product |
| https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12 | [email protected] | US Government Resource |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| senselive x3500 firmware | 1.523 |
CPE
Remediation
| |
| senselive x3500 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 28, 2026 | Initial Analysis | [email protected] |
| Apr 24, 2026 | New CVE Received | [email protected] |