CVE-2021-3615: Lenovo Smart Camera c2e Firmware

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow code execution if a specific file exists on the attached SD card. This vulnerability is the same as CNVD-2021-45262.

Affected products

• Lenovo Smart Camera c2e Firmware: before 01.03.29.16 (fixed in 01.03.29.16)
• Lenovo Smart Camera x3 Firmware: before 01.03.29.16 (fixed in 01.03.29.16)
• Lenovo Smart Camera x5 Firmware: before 01.03.29.16 (fixed in 01.03.29.16)

Published 2021-08-17. Last modified 2026-06-17.