PT-2021-21148 · Lenovo · Lenovo Smart Camera

Charles Jiang + 1 · Published 2021-08-17 · Updated 2021-08-30 · CVE-2021-3616

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo Smart Camera versions X3, X5, and C2E

Description A vulnerability was reported that could allow an unauthorized user to view device information, alter firmware content, and device configuration.

Recommendations For Lenovo Smart Camera X3, consider updating to a version that addresses this issue. For Lenovo Smart Camera X5, consider updating to a version that addresses this issue. For Lenovo Smart Camera C2E, consider updating to a version that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2021-3616

Affected Products

Lenovo Smart Camera

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-3616 · Security Note
• https://iknow.lenovo.com.cn/detail/dc_198417.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3616 · Vendor Advisory
• https://cnvd.org.cn/flaw/show/CNVD-2020-68651 · Note
• https://t.me/cibsecurity/27437 · Telegram Post