CVE-2021-3616criticalCWE-285

CVE-2021-3616: critical vulnerability in Lenovo Smart Camera X3, X5, and C2E firmware

Published · Updated

Follow this CVE+ Monitor Smart Camera X3, X5, and C2E

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.4epss 0.9%
A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alter firmware content and device configuration. This vulnerability is the same as CNVD-2020-68651.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Affected products
Lenovo · Smart Camera X3, X5, and C2E firmware
Related CVEs — Lenovo Smart Camera X3, X5, and C2E firmware

In the same product, most dangerous first.

CVE-2021-3617HIGHCVE-2021-3617EPSS 1.7%CVE-2021-3615MEDIUMCVE-2021-3615EPSS 0.3%