The vulnerability is an improper TLS certificate validation (CWE‑295) that allows an adjacent user to intercept or manipulate the camera’s network communications. Because the device accepts untrusted or self‑signed certificates, an attacker can perform a man‑in‑the‑middle attack, snooping on data or injecting malicious payloads, potentially compromising configuration or firmware updates.

Affected Lenovo Smart Camera models include the C33, C33 Pro, C35, C5X, RQ3, X6Q, X6T, X9T, XW1, and the Smart Network PTZ models X5E, X5Q, and X5T. No specific firmware version ranges are disclosed in the advisory, so any release prior to the newest available firmware is likely vulnerable.

The CVSS base score of 5.9 indicates a moderate level of risk, and the vulnerability is not listed in the CISA KEV catalog. The EPSS score is less than 1%, indicating a very low likelihood of exploitation. The most likely attack vector is a local adjacent user on the same network, as no remote exploitation factors are described. Attack feasibility hinges on the attacker’s proximity to the camera and knowledge of its network configuration; once in range, the compromised communication channel could allow data leakage or manipulation of device behavior.