{"id":"CVE-2021-3616","url":"https://www.cyber-defence.io/tools/cve/CVE-2021-3616","generatedAt":"2026-10-27T18:48:56.520Z","title":"A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alter firmware content and device configuration.","description":"A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alter firmware content and device configuration. This vulnerability is the same as CNVD-2020-68651.","published":"2021-08-17T17:15:08.000Z","lastModified":"2026-06-17T04:05:27.000Z","status":"Modified","sourceIdentifier":"psirt@lenovo.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-285"],"affected":["lenovo/smart camera c2e firmware","lenovo/smart camera x3 firmware","lenovo/smart camera x5 firmware"],"epss":{"score":0.00924,"percentile":0.60174,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.92%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://iknow.lenovo.com.cn/detail/dc_198417.html","tags":["Vendor Advisory"],"source":"psirt@lenovo.com"},{"url":"https://www.cnvd.org.cn/flaw/show/CNVD-2020-68651","tags":["Not Applicable"],"source":"psirt@lenovo.com"},{"url":"https://iknow.lenovo.com.cn/detail/dc_198417.html","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cnvd.org.cn/flaw/show/CNVD-2020-68651","tags":["Not Applicable"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-3616","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}