CVE Intelligence
Analysis AI-assisted

CVE-2026-25775: SenseLive X3050 Missing Authentication in Remote Firmware Management

CVE-2026-25775 affects the remote management service of the SenseLive X3050, which allows firmware retrieval and update operations without authentication or authorization. CISA's ICS advisory rates it critical, with a CVSS 3.1 score of 9.8 and a CVSS 4.0 score of 9.3 from the same CNA. The sources consulted do not list affected or fixed versions, and no confirmed exploitation.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2026-25775 is a missing authentication issue (CWE-306) in the remote management service of the SenseLive X3050. According to the record, the service handles firmware retrieval and update requests from any reachable host without checking user privileges. The vulnerability is documented in CISA ICS advisory ICSA-26-111-12.

Impact

  • An unauthenticated party with network reachability to the management service could retrieve or change firmware.
  • The service does not verify the integrity of uploaded images or the authenticity of firmware, so a modified image could be accepted.
  • The CNA scores the issue as critical: CVSS 3.1 9.8 (vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and CVSS 4.0 9.3.

Affected products and versions

The product is the SenseLive X3050. The record does not list any affected version strings or fixed versions, so the exact scope of affected firmware builds is unknown. Consult the CISA advisory and the vendor contact page for current version information.

Exploitation status

CISA's KEV catalog does not list this CVE in the record, so it is not described as actively exploited there. No confirmed exploitation appears in the sources consulted. The EPSS probability recorded is 0.00754 (percentile 0.53873).

Remediation and mitigation

  • Contact SenseLive through the vendor contact page to confirm whether a fix is available for your device model and firmware line.
  • Until a fix is verified, restrict network access to the management service so that only trusted administrative hosts can reach it.
  • Keep the device off untrusted networks and isolate operational technology segments from general IT traffic.
  • Follow the guidance in the CISA advisory and track updates to it.

Detection guidance

  • Inventory SenseLive X3050 devices and identify which management interfaces are reachable from outside the intended administrative zone.
  • Review network and device logs for firmware-related management requests originating from hosts that are not authorized administrators.
  • Treat unexpected firmware version changes or unfamiliar firmware images as a security event and investigate them.

Limitations of the available information

The record provides no affected or fixed version list, no vendor-supplied remediation details, and no exploitation details beyond the KEV status. Whether a patch exists is unknown. The EPSS date in the record (2026-10-13) is later than the publication date and should be verified against the source.

Frequently asked questions

What is CVE-2026-25775?

It is a missing authentication vulnerability in the remote management service of the SenseLive X3050, allowing firmware retrieval and updates without authorization.

Is this vulnerability known to be actively exploited?

The record shows it is not listed in CISA KEV, and no confirmed exploitation appears in the sources consulted.

Which versions are affected?

The record does not list affected or fixed versions, so this is unknown. Check the CISA advisory and contact the vendor.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.