Search
Find a vulnerability
Search criteria
4 vulnerabilities found for Smart Network PTZ X5Q by Lenovo
CVE-2026-16755 (GCVE-0-2026-16755)
Vulnerability from nvd – Published: 2026-10-15 23:17 – Updated: 2026-10-16 14:08
VLAI
EPSS
VEX
Summary
A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-16 14:07 UTC
CWE
- CWE-1393 - Use of Default Password
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://iknow.lenovo.com.cn/detail/442625 | vendor-advisory |
Impacted products
12 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lenovo | Smart Camera C33 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c33:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera C33 Pro |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c33_pro:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera C35 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c35:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera RQ3 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_rq3:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera XW1 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_xw1:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Network PTZ X5T |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_network_ptz_x5t:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Network PTZ X5Q |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_network_ptz_x5q:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Network PTZ X5E |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_network_ptz_x5e:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera X6T |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_x6t:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera X6Q |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_x6q:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera C5X |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c5x:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera X9T |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_x9t:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-16755",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-16T14:07:54.805524Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-16T14:08:33.634Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Smart Camera C33",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera C33 Pro",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera C35",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera RQ3",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera XW1",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Network PTZ X5T",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Network PTZ X5Q",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Network PTZ X5E",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera X6T",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera X6Q",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera C5X",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera X9T",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c33:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c33_pro:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c35:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_rq3:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_xw1:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_network_ptz_x5t:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_network_ptz_x5q:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_network_ptz_x5e:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_x6t:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_x6q:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c5x:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_x9t:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Lenovo thanks Tan Qingyin, Jin Chenghua, and Song Yuxin Key, Laboratory of Data and Intelligent System Security, Ministry of Education, China Nankai University"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market,\u0026nbsp;that could allow an unauthorized remote user to disclose sensitive information."
}
],
"value": "A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market,\u00a0that could allow an unauthorized remote user to disclose sensitive information."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "ADJACENT",
"baseScore": 6,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1393",
"description": "CWE-1393: Use of Default Password",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T23:17:07.584Z",
"orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
"shortName": "lenovo"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://iknow.lenovo.com.cn/detail/442625"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update product to latest version as indicated in the advisory -\u0026nbsp;https://iknow.lenovo.com.cn/detail/442625"
}
],
"value": "Update product to latest version as indicated in the advisory -\u00a0https://iknow.lenovo.com.cn/detail/442625"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.0-beta"
}
}
},
"cveMetadata": {
"assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
"assignerShortName": "lenovo",
"cveId": "CVE-2026-16755",
"datePublished": "2026-10-15T23:17:07.584Z",
"dateReserved": "2026-07-23T13:06:49.749Z",
"dateUpdated": "2026-10-16T14:08:33.634Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-16754 (GCVE-0-2026-16754)
Vulnerability from nvd – Published: 2026-10-15 23:16 – Updated: 2026-10-16 14:10
VLAI
EPSS
VEX
Summary
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.
Severity
4.8 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-16 14:09 UTC
CWE
- CWE-295 - Improper Certificate Validation
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://iknow.lenovo.com.cn/detail/442625 | vendor-advisory |
Impacted products
12 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lenovo | Smart Camera C33 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c33:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera C33 Pro |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c33_pro:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera C35 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c35:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera RQ3 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_rq3:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera XW1 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_xw1:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Network PTZ X5T |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_network_ptz_x5t:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Network PTZ X5Q |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_network_ptz_x5q:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Network PTZ X5E |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_network_ptz_x5e:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera X6T |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_x6t:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera X6Q |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_x6q:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera C5X |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c5x:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera X9T |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_x9t:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-16754",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-16T14:09:28.760829Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-16T14:10:12.796Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Smart Camera C33",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera C33 Pro",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera C35",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera RQ3",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera XW1",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Network PTZ X5T",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Network PTZ X5Q",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Network PTZ X5E",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera X6T",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera X6Q",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera C5X",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera X9T",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c33:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c33_pro:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c35:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_rq3:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_xw1:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_network_ptz_x5t:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_network_ptz_x5q:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_network_ptz_x5e:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_x6t:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_x6q:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c5x:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_x9t:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Lenovo thanks Tan Qingyin, Jin Chenghua, and Song Yuxin Key, Laboratory of Data and Intelligent System Security, Ministry of Education, China Nankai University"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications."
}
],
"value": "A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "ADJACENT",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "CWE-295: Improper Certificate Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T23:16:59.545Z",
"orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
"shortName": "lenovo"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://iknow.lenovo.com.cn/detail/442625"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update product to latest version as indicated in the advisory -\u0026nbsp;https://iknow.lenovo.com.cn/detail/442625"
}
],
"value": "Update product to latest version as indicated in the advisory -\u00a0https://iknow.lenovo.com.cn/detail/442625"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.0-beta"
}
}
},
"cveMetadata": {
"assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
"assignerShortName": "lenovo",
"cveId": "CVE-2026-16754",
"datePublished": "2026-10-15T23:16:59.545Z",
"dateReserved": "2026-07-23T13:06:48.309Z",
"dateUpdated": "2026-10-16T14:10:12.796Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-16755 (GCVE-0-2026-16755)
Vulnerability from cvelistv5 – Published: 2026-10-15 23:17 – Updated: 2026-10-16 14:08
VLAI
EPSS
VEX
Summary
A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-16 14:07 UTC
CWE
- CWE-1393 - Use of Default Password
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://iknow.lenovo.com.cn/detail/442625 | vendor-advisory |
Impacted products
12 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lenovo | Smart Camera C33 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c33:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera C33 Pro |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c33_pro:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera C35 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c35:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera RQ3 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_rq3:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera XW1 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_xw1:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Network PTZ X5T |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_network_ptz_x5t:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Network PTZ X5Q |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_network_ptz_x5q:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Network PTZ X5E |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_network_ptz_x5e:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera X6T |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_x6t:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera X6Q |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_x6q:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera C5X |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c5x:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera X9T |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_x9t:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-16755",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-16T14:07:54.805524Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-16T14:08:33.634Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Smart Camera C33",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera C33 Pro",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera C35",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera RQ3",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera XW1",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Network PTZ X5T",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Network PTZ X5Q",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Network PTZ X5E",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera X6T",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera X6Q",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera C5X",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera X9T",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c33:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c33_pro:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c35:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_rq3:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_xw1:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_network_ptz_x5t:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_network_ptz_x5q:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_network_ptz_x5e:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_x6t:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_x6q:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c5x:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_x9t:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Lenovo thanks Tan Qingyin, Jin Chenghua, and Song Yuxin Key, Laboratory of Data and Intelligent System Security, Ministry of Education, China Nankai University"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market,\u0026nbsp;that could allow an unauthorized remote user to disclose sensitive information."
}
],
"value": "A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market,\u00a0that could allow an unauthorized remote user to disclose sensitive information."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "ADJACENT",
"baseScore": 6,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1393",
"description": "CWE-1393: Use of Default Password",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T23:17:07.584Z",
"orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
"shortName": "lenovo"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://iknow.lenovo.com.cn/detail/442625"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update product to latest version as indicated in the advisory -\u0026nbsp;https://iknow.lenovo.com.cn/detail/442625"
}
],
"value": "Update product to latest version as indicated in the advisory -\u00a0https://iknow.lenovo.com.cn/detail/442625"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.0-beta"
}
}
},
"cveMetadata": {
"assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
"assignerShortName": "lenovo",
"cveId": "CVE-2026-16755",
"datePublished": "2026-10-15T23:17:07.584Z",
"dateReserved": "2026-07-23T13:06:49.749Z",
"dateUpdated": "2026-10-16T14:08:33.634Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-16754 (GCVE-0-2026-16754)
Vulnerability from cvelistv5 – Published: 2026-10-15 23:16 – Updated: 2026-10-16 14:10
VLAI
EPSS
VEX
Summary
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.
Severity
4.8 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-16 14:09 UTC
CWE
- CWE-295 - Improper Certificate Validation
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://iknow.lenovo.com.cn/detail/442625 | vendor-advisory |
Impacted products
12 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lenovo | Smart Camera C33 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c33:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera C33 Pro |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c33_pro:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera C35 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c35:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera RQ3 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_rq3:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera XW1 |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_xw1:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Network PTZ X5T |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_network_ptz_x5t:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Network PTZ X5Q |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_network_ptz_x5q:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Network PTZ X5E |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_network_ptz_x5e:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera X6T |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_x6t:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera X6Q |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_x6q:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera C5X |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_c5x:*:*:*:*:*:*:*:* |
|
| Lenovo | Smart Camera X9T |
Affected:
0 , < 05.02.31.140
(custom)
cpe:2.3:a:lenovo:smart_camera_x9t:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-16754",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-16T14:09:28.760829Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-16T14:10:12.796Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Smart Camera C33",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera C33 Pro",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera C35",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera RQ3",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera XW1",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Network PTZ X5T",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Network PTZ X5Q",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Network PTZ X5E",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera X6T",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera X6Q",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera C5X",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart Camera X9T",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "05.02.31.140",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c33:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c33_pro:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c35:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_rq3:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_xw1:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_network_ptz_x5t:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_network_ptz_x5q:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_network_ptz_x5e:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_x6t:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_x6q:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_c5x:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lenovo:smart_camera_x9t:*:*:*:*:*:*:*:*",
"versionEndExcluding": "05.02.31.140",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Lenovo thanks Tan Qingyin, Jin Chenghua, and Song Yuxin Key, Laboratory of Data and Intelligent System Security, Ministry of Education, China Nankai University"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications."
}
],
"value": "A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "ADJACENT",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "CWE-295: Improper Certificate Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T23:16:59.545Z",
"orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
"shortName": "lenovo"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://iknow.lenovo.com.cn/detail/442625"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update product to latest version as indicated in the advisory -\u0026nbsp;https://iknow.lenovo.com.cn/detail/442625"
}
],
"value": "Update product to latest version as indicated in the advisory -\u00a0https://iknow.lenovo.com.cn/detail/442625"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.0-beta"
}
}
},
"cveMetadata": {
"assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
"assignerShortName": "lenovo",
"cveId": "CVE-2026-16754",
"datePublished": "2026-10-15T23:16:59.545Z",
"dateReserved": "2026-07-23T13:06:48.309Z",
"dateUpdated": "2026-10-16T14:10:12.796Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}