CVE-2026-16755

A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://iknow.lenovo.com.cn/detail/442625

Configurations

No configuration.

History

16 Oct 2026, 00:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-16 00:17

Updated : 2026-10-16 19:55

NVD link : CVE-2026-16755

Mitre link : CVE-2026-16755

CVE.ORG link : CVE-2026-16755

JSON object : View

Products Affected

No product.

CWE

CWE-1393

Use of Default Password

{"id": "CVE-2026-16755", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-16755", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-16T14:07:54.805524Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@lenovo.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.6}], "cvssMetricV40": [{"type": "Secondary", "source": "psirt@lenovo.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.0, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "psirt@lenovo.com", "affectedData": [{"vendor": "Lenovo", "product": "Smart Camera C33", "versions": [{"status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Lenovo", "product": "Smart Camera C33 Pro", "versions": [{"status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Lenovo", "product": "Smart Camera C35", "versions": [{"status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Lenovo", "product": "Smart Camera RQ3", "versions": [{"status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Lenovo", "product": "Smart Camera XW1", "versions": [{"status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Lenovo", "product": "Smart Network PTZ X5T", "versions": [{"status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Lenovo", "product": "Smart Network PTZ X5Q", "versions": [{"status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Lenovo", "product": "Smart Network PTZ X5E", "versions": [{"status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Lenovo", "product": "Smart Camera X6T", "versions": [{"status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Lenovo", "product": "Smart Camera X6Q", "versions": [{"status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Lenovo", "product": "Smart Camera C5X", "versions": [{"status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Lenovo", "product": "Smart Camera X9T", "versions": [{"status": "affected", "version": "0", "lessThan": "05.02.31.140", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-10-16T00:17:05.220", "references": [{"url": "https://iknow.lenovo.com.cn/detail/442625", "source": "psirt@lenovo.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@lenovo.com", "description": [{"lang": "en", "value": "CWE-1393"}]}], "descriptions": [{"lang": "en", "value": "A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market,\u00a0that could allow an unauthorized remote user to disclose sensitive information."}], "lastModified": "2026-10-16T19:55:59.740", "sourceIdentifier": "psirt@lenovo.com"}