CVE-2021-3617: Lenovo Smart Camera c2e Firmware

High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days.

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow command injection by setting a specially crafted network configuration. This vulnerability is the same as CNVD-2020-68652.

Affected products

• Lenovo Smart Camera c2e Firmware: before 01.03.29.16 (fixed in 01.03.29.16)
• Lenovo Smart Camera x3 Firmware: before 01.03.29.16 (fixed in 01.03.29.16)
• Lenovo Smart Camera x5 Firmware: before 01.03.29.16 (fixed in 01.03.29.16)

Published 2021-08-17. Last modified 2026-06-17.