Lenovo thanks Tan Qingyin, Jin Chenghua, and Song Yuxin Key, Laboratory of Data and Intelligent System Security, Ministry of Education, China Nankai University

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information.