High severity8.8NVD Advisory· Published May 1, 2023· Updated Jun 17, 2026

CVE-2023-0896

Description

A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access.

Affected products

Lenovo/Smart Clock Essential with Alexa Built Incpe-rescue2 versions
Versions prior to v90+ 1 more
- (no CPE)range: Versions prior to v90
- (no CPE)
Lenovo/Smart Clock Essential With Alexa Built In Firmware
cpe:2.3:o:lenovo:smart_clock_essential_with_alexa_built_in_firmware:*:*:*:*:*:*:*:*
Range: <90

Patches

Vulnerability mechanics

References

support.lenovo.com/us/en/product_security/LEN-113714nvdVendor Advisory
www.talosintelligence.com/vulnerability_reports/TALOS-2023-1692nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000