9.8

CVE-2021-3616

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alter firmware content and device configuration. This vulnerability is the same as CNVD-2020-68651.

Data is provided by the National Vulnerability Database (NVD)
Lenovo ≫ Smart Camera C2e Firmware Version < 01.03.29.16
   Lenovo ≫ Smart Camera C2e Version-
Lenovo ≫ Smart Camera X3 Firmware Version < 01.03.29.16
   Lenovo ≫ Smart Camera X3 Version-
Lenovo ≫ Smart Camera X5 Firmware Version < 01.03.29.16
   Lenovo ≫ Smart Camera X5 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.26% 0.464
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
psirt@lenovo.com 9.4 3.9 5.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
CWE-285 Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.