{"id":"CVE-2026-16754","state":"PUBLISHED","title":"A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user ","description":"A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.","publishedAt":"2026-10-15T23:16:59.545Z","updatedAt":"2026-10-16T14:10:12.796Z","severity":{"score":5.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","source":"lenovo"},"assigner":"lenovo","products":["Lenovo Smart Camera C33","Lenovo Smart Camera C33 Pro","Lenovo Smart Camera C35","Lenovo Smart Camera RQ3","Lenovo Smart Camera XW1","Lenovo Smart Network PTZ X5T","Lenovo Smart Network PTZ X5Q","Lenovo Smart Network PTZ X5E","Lenovo Smart Camera X6T","Lenovo Smart Camera X6Q","Lenovo Smart Camera C5X","Lenovo Smart Camera X9T"],"affected":[{"vendor":"Lenovo","product":"Smart Camera C33","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera C33 Pro","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera C35","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera RQ3","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera XW1","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Network PTZ X5T","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Network PTZ X5Q","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Network PTZ X5E","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera X6T","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera X6Q","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera C5X","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera X9T","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]}],"references":["https://iknow.lenovo.com.cn/detail/442625"],"weaknesses":["CWE-295"],"ingestedAt":"2026-10-29T20:11:00.674Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/16xxx/CVE-2026-16754.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-16754","state":"PUBLISHED","datePublished":"2026-10-15T23:16:59.545Z","dateUpdated":"2026-10-16T14:10:12.796Z","assignerShortName":"lenovo","assignerOrgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b","dateReserved":"2026-07-23T13:06:48.309Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications."}],"affected":[{"vendor":"Lenovo","product":"Smart Camera C33","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera C33 Pro","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera C35","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera RQ3","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera XW1","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Network PTZ X5T","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Network PTZ X5Q","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Network PTZ X5E","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera X6T","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera X6Q","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera C5X","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]},{"vendor":"Lenovo","product":"Smart Camera X9T","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"05.02.31.140","versionType":"custom"}]}],"references":[{"url":"https://iknow.lenovo.com.cn/detail/442625","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"PASSIVE","vulnConfidentialityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"MEDIUM","baseScore":5.9,"vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}},{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":4.8,"vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-295","lang":"en","description":"CWE-295: Improper Certificate Validation","type":"CWE"}]}],"providerMetadata":{"shortName":"lenovo","orgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b","dateUpdated":"2026-10-15T23:16:59.545Z"},"cpeApplicability":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:smart_camera_c33:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"05.02.31.140"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:smart_camera_c33_pro:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"05.02.31.140"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:smart_camera_c35:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"05.02.31.140"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:smart_camera_rq3:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"05.02.31.140"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:smart_camera_xw1:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"05.02.31.140"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:smart_network_ptz_x5t:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"05.02.31.140"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:smart_network_ptz_x5q:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"05.02.31.140"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:smart_network_ptz_x5e:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"05.02.31.140"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:smart_camera_x6t:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"05.02.31.140"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:smart_camera_x6q:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"05.02.31.140"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:smart_camera_c5x:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"05.02.31.140"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:smart_camera_x9t:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"05.02.31.140"}]}]}],"solutions":[{"lang":"en","value":"Update product to latest version as indicated in the advisory - https://iknow.lenovo.com.cn/detail/442625","supportingMedia":[{"type":"text/html","base64":false,"value":"Update product to latest version as indicated in the advisory - https://iknow.lenovo.com.cn/detail/442625"}]}],"credits":[{"lang":"en","value":"Lenovo thanks Tan Qingyin, Jin Chenghua, and Song Yuxin Key, Laboratory of Data and Intelligent System Security, Ministry of Education, China Nankai University","type":"finder"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.0-beta"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-16T14:09:28.760829Z","id":"CVE-2026-16754","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-16T14:10:12.796Z"}}]}}}