CVE-2026-16754
CVSS Score
4.8
EPSS Score
0.0%
EPSS Percentile
0th
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.
| CWE | CWE-295 |
| Vendor | lenovo |
| Product | smart camera c33 |
| Published | Oct 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for lenovo smart camera c33
Be the first to know when new medium vulnerabilities affecting lenovo smart camera c33 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
Lenovo / Smart Camera C33
0 < 05.02.31.140
Lenovo / Smart Camera C33 Pro
0 < 05.02.31.140
Lenovo / Smart Camera C35
0 < 05.02.31.140
Lenovo / Smart Camera RQ3
0 < 05.02.31.140
Lenovo / Smart Camera XW1
0 < 05.02.31.140
Lenovo / Smart Network PTZ X5T
0 < 05.02.31.140
Lenovo / Smart Network PTZ X5Q
0 < 05.02.31.140
Lenovo / Smart Network PTZ X5E
0 < 05.02.31.140
Lenovo / Smart Camera X6T
0 < 05.02.31.140
Lenovo / Smart Camera X6Q
0 < 05.02.31.140
Lenovo / Smart Camera C5X
0 < 05.02.31.140
Lenovo / Smart Camera X9T
0 < 05.02.31.140
References
Credits
Lenovo thanks Tan Qingyin, Jin Chenghua, and Song Yuxin Key, Laboratory of Data and Intelligent System Security, Ministry of Education, China Nankai University