Lenovo thanks Mickey Shkatov and Jesse Michael of Eclypsium for reporting this issue.

A potential vulnerability was reported in the Lenovo 510 FHD and Performance FHD web cameras that could allow an attacker with physical access to write arbitrary firmware updates to the device over a USB connection.