by Kastro
Paper/Archive/CVE-2021-3616

CVE-2021-3616

Lenovo Smart Camera X3, X5, and C2E firmware — A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alt…

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 60.4.604 × 2012.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alter firmware content and device configuration. This vulnerability is the same as CNVD-2020-68651.

Affected

ProductAffectedFixed inSource
Smart Camera X3, X5, and C2E firmwareunspecified – < 01.03.29.1601.03.29.16CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
lenovo (CNA)9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

References

refiknow.lenovo.com.cn/detail/dc_198417.htmlrefcnvd.org.cn/flaw/show/CNVD-2020-68651