{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-16754", "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "state": "PUBLISHED", "assignerShortName": "lenovo", "dateReserved": "2026-07-23T13:06:48.309Z", "datePublished": "2026-10-15T23:16:59.545Z", "dateUpdated": "2026-10-16T14:10:12.796Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo", "dateUpdated": "2026-10-15T23:16:59.545Z" }, "problemTypes": [ { "descriptions": [ { "lang": "en", "cweId": "CWE-295", "description": "CWE-295: Improper Certificate Validation", "type": "CWE" } ] } ], "affected": [ { "vendor": "Lenovo", "product": "Smart Camera C33", "versions": [ { "status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Lenovo", "product": "Smart Camera C33 Pro", "versions": [ { "status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Lenovo", "product": "Smart Camera C35", "versions": [ { "status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Lenovo", "product": "Smart Camera RQ3", "versions": [ { "status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Lenovo", "product": "Smart Camera XW1", "versions": [ { "status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Lenovo", "product": "Smart Network PTZ X5T", "versions": [ { "status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Lenovo", "product": "Smart Network PTZ X5Q", "versions": [ { "status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Lenovo", "product": "Smart Network PTZ X5E", "versions": [ { "status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Lenovo", "product": "Smart Camera X6T", "versions": [ { "status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Lenovo", "product": "Smart Camera X6Q", "versions": [ { "status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Lenovo", "product": "Smart Camera C5X", "versions": [ { "status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "Lenovo", "product": "Smart Camera X9T", "versions": [ { "status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "cpeApplicability": [ { "operator": "OR", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:smart_camera_c33:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "05.02.31.140" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:smart_camera_c33_pro:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "05.02.31.140" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:smart_camera_c35:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "05.02.31.140" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:smart_camera_rq3:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "05.02.31.140" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:smart_camera_xw1:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "05.02.31.140" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:smart_network_ptz_x5t:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "05.02.31.140" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:smart_network_ptz_x5q:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "05.02.31.140" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:smart_network_ptz_x5e:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "05.02.31.140" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:smart_camera_x6t:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "05.02.31.140" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:smart_camera_x6q:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "05.02.31.140" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:smart_camera_c5x:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "05.02.31.140" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:smart_camera_x9t:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "05.02.31.140" } ] } ] } ], "descriptions": [ { "lang": "en", "value": "A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications." } ] } ], "references": [ { "url": "https://iknow.lenovo.com.cn/detail/442625", "tags": [ "vendor-advisory" ] } ], "metrics": [ { "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ], "cvssV4_0": { "attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 5.9, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" } }, { "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ], "cvssV3_1": { "version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.8, "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" } } ], "solutions": [ { "lang": "en", "value": "Update product to latest version as indicated in the advisory - https://iknow.lenovo.com.cn/detail/442625", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "Update product to latest version as indicated in the advisory - https://iknow.lenovo.com.cn/detail/442625" } ] } ], "credits": [ { "lang": "en", "value": "Lenovo thanks Tan Qingyin, Jin Chenghua, and Song Yuxin Key, Laboratory of Data and Intelligent System Security, Ministry of Education, China Nankai University", "type": "finder" } ], "source": { "discovery": "UNKNOWN" }, "x_generator": { "engine": "Vulnogram 1.0.0-beta" } }, "adp": [ { "metrics": [ { "other": { "type": "ssvc", "content": { "timestamp": "2026-10-16T14:09:28.760829Z", "id": "CVE-2026-16754", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T14:10:12.796Z" } } ] } }