CVE-2021-3616 CRITICAL

CVE-2021-3616

Vendor Lenovo
Product Smart Camera X3, X5, and C2E firmware
Weakness CWE-285
Published August 17, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

9.4/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

What the vulnerability does

01Description

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alter firmware content and device configuration. This vulnerability is the same as CNVD-2020-68651.

Key dates

02Disclosure timeline

August 17, 2021 CVE published
August 3, 2024 Record updated