The vulnerability allows an unauthenticated attacker to discover deployed SenseLive X3050 units via the management protocol. It enables enumeration of device presence, identifiers, and management interfaces without credentials, effectively bypassing authentication controls. The weakness is an authentication failure (CWE-306) that may lead to information disclosure and facilitate further network reconnaissance.

The affected product is SenseLive X3050. No specific firmware or configuration version is listed, so all instances of the management ecosystem are potentially impacted. The vulnerability exists in the vendor’s management protocol used by the device.

With a CVSS score of 8.7 the vulnerability is considered high severity. The EPSS of less than 1% indicates a very low probability of exploitation at the time of analysis, and the vulnerability is not listed in CISA’s KEV catalog. Inferred from the description, the attack requires an attacker to be on the same network segment as the device, and the exploitation path involves sending discovery requests through the exposed service. The impact is primarily information disclosure and potential pre‑requisites for further lateral movement or device compromise.