CVEvulnerability
CVE-2021-3616
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-08-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.4 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-285
Description
A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alter firmware content and device configuration. This vulnerability is the same as CNVD-2020-68651.
Affected configurations
• lenovo smart camera c2e firmware (< 01.03.29.16)
• lenovo smart camera x3 firmware (< 01.03.29.16)
• lenovo smart camera x5 firmware (< 01.03.29.16)
Related
Weakness · CWE (1)
- CWE-285 Improper Authorization weakness
References
- https://iknow.lenovo.com.cn/detail/dc_198417.html Vendor Advisory
- https://www.cnvd.org.cn/flaw/show/CNVD-2020-68651 Not Applicable
- https://iknow.lenovo.com.cn/detail/dc_198417.html Vendor Advisory
- https://www.cnvd.org.cn/flaw/show/CNVD-2020-68651 Not Applicable