CVE-2023-0896 - A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access

Back Back to CVE browser

HIGH

A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access

Published May 1, 2023

8.8

HIGH

CVSS 3.1

EPSS 0.40%

Description

A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access.

Affected products

Vendor Lenovo Product Lenovo Smart Clock Essential with Alexa Built In Default
unaffected
Affected
- Versions prior to v90

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Lenovo	Lenovo Smart Clock Essential with Alexa Built In	unaffected	Affected Versions prior to v90

Remediation

Vendor solution

Update to Lenovo Smart Clock Essential software version 90 or later.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-12885		Advisory
https://support.lenovo.com/us/en/product_security/LEN-113714		Vendor Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1692

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner lenovo

Published May 1, 2023

Updated Jan 30, 2025

Reserved Feb 17, 2023

Link CVE-2023-0896

CISA Vulnrichment

Updated Jan 30, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-0896

Red Hat

No data

ENISA EUVD

Assigner lenovo

Published May 1, 2023

Updated Jan 30, 2025

Link EUVD-2023-12885

GitHub

No data