Veille CVE
CVE-2026-16754
4.8 MoyenneDescription
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.
Produits concernés
- Lenovo Smart Camera C33
- Lenovo Smart Camera C33 Pro
- Lenovo Smart Camera C35
- Lenovo Smart Camera RQ3
- Lenovo Smart Camera XW1
- Lenovo Smart Network PTZ X5T
- Lenovo Smart Network PTZ X5Q
- Lenovo Smart Network PTZ X5E
- Lenovo Smart Camera X6T
- Lenovo Smart Camera X6Q
- Lenovo Smart Camera C5X
- Lenovo Smart Camera X9T
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 4.0 | 5.9 Moyenne | psirt@lenovo.com | CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| 3.1 | 4.8 Moyenne | psirt@lenovo.com | CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N |