CVE-2026-16754
MediumCVSS 4.8Summary
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.
Risk Assessment
An attacker on the same network may impersonate a trusted server and intercept or modify data transmitted by the camera.
Recommendation
Update the camera firmware to the latest version and apply network segmentation to limit access from adjacent devices.
Other vulnerabilities in Lenovo Smart Camera C33
Original NVD description (English source)
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS