PT-2021-21154
CVE-2021-3617
·
Published
2021-08-17
·
Updated
2021-08-30
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Lenovo Smart Camera versions X3, X5, and C2E
Description
A vulnerability was reported that could allow command injection by setting a specially crafted network configuration.
Recommendations
For Lenovo Smart Camera X3, consider setting a secure network configuration to prevent command injection.
For Lenovo Smart Camera X5, consider setting a secure network configuration to prevent command injection.
For Lenovo Smart Camera C2E, consider setting a secure network configuration to prevent command injection.
As a temporary workaround, consider restricting network configuration changes until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾