← Vulnerability feed

Vulnerability record · CVE-2021-3849 · published 22 April 2022

CVE-2021-3849: Lenovo nextscale n1200 enclosure firmware authentication bypass via alternate path vulnerability

Lenovo · Nextscale N1200 Enclosure Firmware

An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected.

9.8 CVSS 3.1 Critical EPSS 1.3% · top 30.0% CWE-288 · Authentication bypass via alternate path
9.8CVSS 3.1 base score, v2 7.5
1.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
5Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

5 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.lenovo.com/us/en/product_security/LEN-72615 Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-72615 Vendor Advisory

Track CVE-2021-3849 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2021-3897Lenovo nextscale n1200 enclosure firmware authentication bypass via alternate path vulnerabilityAn authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management …EPSS 1.3%7.5CVE-2023-2992Lenovo nextscale n1200 enclosure firmware vulnerabilityAn unauthenticated  denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted …EPSS 0.62%7.2CVE-2024-2659Lenovo nextscale n1200 enclosure firmware os command injection vulnerabilityA command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute syste…EPSS 1.1%6.5CVE-2022-34884Lenovo thinkagile vx3331 firmware stack-based buffer overflow vulnerabilityA buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem den…EPSS 0.63%6.3CVE-2023-2993Lenovo nextscale n1200 enclosure firmware vulnerabilityA valid, authenticated user with limited privileges may be able to use specifically crafted web management server API calls to execute a limited numb…EPSS 0.29%4.3CVE-2022-34888Lenovo thinkagile vx3331 firmware vulnerabilityThe Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be ac…EPSS 0.41%10.0CVE-2026-20079Cisco Secure Firewall Management Center authentication bypass to rootCisco Secure Firewall Management Center (FMC) Software contains an authentication bypass caused by an improper system process created at boot time. A…KEVEPSS 88%analysed9.3CVE-2026-19490Citrix NetScaler ADC and Gateway authentication bypass via alternate pathNetScaler ADC and NetScaler Gateway contain an authentication bypass via an alternate path or channel (CWE-288). The flaw is remotely reachable witho…KEVEPSS 23%analysed

Source: NIST National Vulnerability Database (record CVE-2021-3849), CISA KEV, FIRST EPSS (scores of 2026-10-17). This page is refreshed as NVD updates the record.