Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:lenovo_system_management_module_(smm):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductLenovo System Management Module (Smm) (515a58f6-992d-5f11-a243-2ab4e0323415)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-3897 vulnerable 2026-06-08 05:33:54.483020 Details available
CRITICAL (9.8)
An authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware during an that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected.
Published: 2022-04-22T21:10:13.000Z
Updated: 2024-08-03T17:09:09.641Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3849 vulnerable 2026-06-08 05:33:54.436917 Details available
CRITICAL (9.8)
An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected.
Published: 2022-04-22T21:10:11.000Z
Updated: 2024-08-03T17:09:09.602Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.