Lenovo Smart Camera EUVD-2026-102532

Exploitation requires the attacker to be network-adjacent to the camera - on the same local/Wi-Fi segment - and to establish a man-in-the-middle position (the AT:P attack requirement); the device then fails to validate the TLS server certificate (CWE-295), allowing interception. Passive user interaction (UI:P) is also needed, meaning the victim's normal camera/app activity must occur for traffic to be captured. Key LIMITING factors: no remote/internet-based exploitation (AV:A, not AV:N), dependency on first obtaining the adjacent MITM position, and the products being sold exclusively in the Chinese market, which sharply narrows the realistic target population.

This is a medium-severity (CVSS 4.0 base 5.9) improper certificate validation flaw (CWE-295) in Lenovo consumer smart cameras, and the signal picture is internally consistent and points to a LOW real-world priority rather than an urgent one. The CVSS 4.0 vector (AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N) confirms the attacker must be network-adjacent (same L2/Wi-Fi segment), needs a specific attack requirement to be met (AT:P - i.e. a man-in-the-middle position), requires passive user interaction, and gains only confidentiality impact. No EPSS score was supplied in the input, there is no CISA KEV listing, and no public POC was referenced, so exploitation status is 'no public exploit identified at time of analysis.' The one notable tension is between the vector and the description: the vendor scored VI:N (no integrity impact), yet the description explicitly states communications could be 'intercept[ed] or manipulat[ed]' - manipulation implies an integrity impact that the published vector does not reflect; verify the integrity scoring with Lenovo. Combined with the adjacent-only vector and MITM prerequisite, this is a genuine-but-contained privacy risk, not a widely-automatable mass-exploitation threat.

An attacker who has already gained a position on the same local or Wi-Fi network as the camera (e.g. a shared/compromised home or small-office WLAN) performs a man-in-the-middle attack and, because the device fails to properly validate TLS certificates, transparently intercepts the camera's traffic to capture video/credentials or alter the data in transit. No public exploit code was referenced, and the attack depends on achieving the adjacent MITM position plus the victim's normal device activity.