ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-3849

—
CVSS 3.1
9.8 critical
EPSS
1%p68
Published
()
Modified
Description

An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected.

Vendors
lenovoibm
Products
nextscale n1200 enclosure firmware, thinkagile hx enclosure certified node firmware, thinkagile vx enclosure firmware, thinksystem d2 enclosure firmware, nextscale fan power controller firmware
Weakness
CWE-288
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news

No ingested article mentions this CVE yet.