Description
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.
Published: 2026-10-15
Score: 5.9 Medium
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Solution

Update product to latest version as indicated in the advisory - https://iknow.lenovo.com.cn/detail/442625

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
History

Fri, 16 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 16 Oct 2026 14:00:00 +0000

Type Values Removed Values Added
Title Improper TLS Certificate Validation in Lenovo Smart Cameras Enables Local Man-in-the-Middle Attacks

Fri, 16 Oct 2026 07:30:00 +0000

Type Values Removed Values Added
Title Improper TLS Certificate Validation in Lenovo Smart Cameras Enables Local Man-in-the-Middle Attacks

Thu, 15 Oct 2026 23:30:00 +0000

Type Values Removed Values Added
Description A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.
First Time appeared Lenovo
Lenovo smart Camera C33
Lenovo smart Camera C33 Pro
Lenovo smart Camera C35
Lenovo smart Camera C5x
Lenovo smart Camera Rq3
Lenovo smart Camera X6q
Lenovo smart Camera X6t
Lenovo smart Camera X9t
Lenovo smart Camera Xw1
Lenovo smart Network Ptz X5e
Lenovo smart Network Ptz X5q
Lenovo smart Network Ptz X5t
Weaknesses CWE-295
CPEs cpe:2.3:a:lenovo:smart_camera_c33:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:smart_camera_c33_pro:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:smart_camera_c35:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:smart_camera_c5x:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:smart_camera_rq3:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:smart_camera_x6q:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:smart_camera_x6t:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:smart_camera_x9t:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:smart_camera_xw1:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:smart_network_ptz_x5e:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:smart_network_ptz_x5q:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:smart_network_ptz_x5t:*:*:*:*:*:*:*:*
Vendors & Products Lenovo
Lenovo smart Camera C33
Lenovo smart Camera C33 Pro
Lenovo smart Camera C35
Lenovo smart Camera C5x
Lenovo smart Camera Rq3
Lenovo smart Camera X6q
Lenovo smart Camera X6t
Lenovo smart Camera X9t
Lenovo smart Camera Xw1
Lenovo smart Network Ptz X5e
Lenovo smart Network Ptz X5q
Lenovo smart Network Ptz X5t
References
Metrics cvssV3_1

{'score': 4.8, 'vector': 'CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N'}

cvssV4_0

{'score': 5.9, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}


Subscriptions

Lenovo Smart Camera C33 Smart Camera C33 Pro Smart Camera C35 Smart Camera C5x Smart Camera Rq3 Smart Camera X6q Smart Camera X6t Smart Camera X9t Smart Camera Xw1 Smart Network Ptz X5e Smart Network Ptz X5q Smart Network Ptz X5t
cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2026-10-16T14:10:12.796Z

Reserved: 2026-07-23T13:06:48.309Z

Link: CVE-2026-16754

cve-icon Vulnrichment

Updated: 2026-10-16T14:09:59.654Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-16T00:17:05.020

Modified: 2026-10-16T19:55:59.740

Link: CVE-2026-16754

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-16T16:00:12Z

Weaknesses
  • CWE-295

    Improper Certificate Validation