CVE-2021-3849

CVE-2021-3849 affects Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware. The vulnerability is an authentication bypass in the web interfaces that could allow an unauthenticated attacker to execute commands on the SMM and FPC2; SMM2 is not affected. Public docu...

CVE-2021-3897

CVE-2021-3897 describes an authentication bypass in internal services of Lenovo’s Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware, with SMM2 reportedly not affected. Multiple connected sources confirm the vulnerability could allow an unauthenticated attacker...