Unrated severityNVD Advisory· Published Apr 22, 2022· Updated Aug 3, 2024
CVE-2021-3849
CVE-2021-3849
Description
An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected.
Affected products
4(expand)+ 1 more
- (no CPE)
- (no CPE)range: various
(expand)+ 1 more
- (no CPE)
- (no CPE)range: various
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- support.lenovo.com/us/en/product_security/LEN-72615mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.