CVE-2026-16755

MEDIUM CVSS 4.0: 6.0 EPSS 0.16%
Updated Oct 16, 2026
Lenovo
Parameter Value
CVSS 6.0 (MEDIUM)
Affected Versions 0 — 05.02.31.140
Fixed In 05.02.31.140
Type CWE-1393 (Use of Default Password)
Vendor Lenovo
Public PoC No

A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information.

Attack Parameters

Attack Vector
Adjacent
Requires local network access
Attack Complexity
Low
Easy to exploit
Attack Requirements
Present
Additional conditions required
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
None
No data modification
Availability
None
No disruption

CVSS Vector v4.0

Vulnerable Products 12

Configuration From (including) Up to (excluding)
Lenovo Smart_Camera_C33
cpe:2.3:a:lenovo:smart_camera_c33:*:*:*:*:*:*:*:*
0 05.02.31.140
Lenovo Smart_Camera_C33_Pro
cpe:2.3:a:lenovo:smart_camera_c33_pro:*:*:*:*:*:*:*:*
0 05.02.31.140
Lenovo Smart_Camera_C35
cpe:2.3:a:lenovo:smart_camera_c35:*:*:*:*:*:*:*:*
0 05.02.31.140
Lenovo Smart_Camera_Rq3
cpe:2.3:a:lenovo:smart_camera_rq3:*:*:*:*:*:*:*:*
0 05.02.31.140
Lenovo Smart_Camera_Xw1
cpe:2.3:a:lenovo:smart_camera_xw1:*:*:*:*:*:*:*:*
0 05.02.31.140
Lenovo Smart_Network_Ptz_X5t
cpe:2.3:a:lenovo:smart_network_ptz_x5t:*:*:*:*:*:*:*:*
0 05.02.31.140
Lenovo Smart_Network_Ptz_X5q
cpe:2.3:a:lenovo:smart_network_ptz_x5q:*:*:*:*:*:*:*:*
0 05.02.31.140
Lenovo Smart_Network_Ptz_X5e
cpe:2.3:a:lenovo:smart_network_ptz_x5e:*:*:*:*:*:*:*:*
0 05.02.31.140
Lenovo Smart_Camera_X6t
cpe:2.3:a:lenovo:smart_camera_x6t:*:*:*:*:*:*:*:*
0 05.02.31.140
Lenovo Smart_Camera_X6q
cpe:2.3:a:lenovo:smart_camera_x6q:*:*:*:*:*:*:*:*
0 05.02.31.140
Lenovo Smart_Camera_C5x
cpe:2.3:a:lenovo:smart_camera_c5x:*:*:*:*:*:*:*:*
0 05.02.31.140
Lenovo Smart_Camera_X9t
cpe:2.3:a:lenovo:smart_camera_x9t:*:*:*:*:*:*:*:*
0 05.02.31.140