CVE-2021-3616

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-08-17 · updated 2026-06-17
Weakness: CWE-285

Description

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alter firmware content and device configuration. This vulnerability is the same as CNVD-2020-68651.

Affected products

Lenovo Smart Camera C2E Firmware: before 01.03.29.16 — fixed in 01.03.29.16
Lenovo Smart Camera X3 Firmware: before 01.03.29.16 — fixed in 01.03.29.16
Lenovo Smart Camera X5 Firmware: before 01.03.29.16 — fixed in 01.03.29.16

How to fix

Upgrade to a fixed version: Lenovo Smart Camera C2E Firmware 01.03.29.16; Lenovo Smart Camera X3 Firmware 01.03.29.16; Lenovo Smart Camera X5 Firmware 01.03.29.16. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-3616 or the next vulnerability affects your stack