Vulnerability Description
A vulnerability exists in SenseLive X3050’s web management interface in which password updates are not reliably applied due to improper handling of credential changes on the backend. After the device undergoes a factory restore using the SenseLive Config 2.0 tool, the interface may indicate that the password update was successful; however, the system may continue to accept the previous or default credentials, demonstrating that the password-change process is not consistently enforced. Even after a factory reset, attempted password changes may fail to propagate correctly.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Senselive | X3500 Firmware | 1.523 |
| Senselive | X3500 | - |
Related Weaknesses (CWE)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-11Third Party Advisory
- https://senselive.io/contactProduct
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12US Government Resource
FAQ
What is CVE-2026-39462?
CVE-2026-39462 is a vulnerability with a CVSS score of 8.1 (HIGH). A vulnerability exists in SenseLive X3050’s web management interface in which password updates are not reliably applied due to improper handling of credential changes on the backend. After the device ...
How severe is CVE-2026-39462?
CVE-2026-39462 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-39462?
Check the references section above for vendor advisories and patch information. Affected products include: Senselive X3500 Firmware, Senselive X3500.