CVE:CVE-2021-3849
CNNVD:CNNVD-202112-1297
Lenovo Fan Power Controller2（Lenovo Fpc2）和Lenovo System Management Module（Lenovo Smm）都是中国联想（Lenovo）公司的产品。Lenovo Fan Power Controller2是一个风扇电源控制器固件。Lenovo System Management Module是一个系统管理模块固件。
Lenovo Fan Power Controller2 (FPC2) 和 Lenovo System Management Module (SMM) 固件的 Web 界面中存在安全漏洞，该漏洞可能允许未经身份验证的攻击者在 SMM 和 FPC2 上执行命令。SMM2 不受影响。
solution:Upgrade lenovo nextscale_n1200_enclosure_firmware to a higher version than fhet50b-2.90,and avoid the version (,fhet50b-2.90); Upgrade lenovo thinkagile_hx_enclosure_certified_node_firmware to a higher version than tesm28b-1.21,and avoid the version (,tesm28b-1.21); Upgrade lenovo thinkagile_vx_enclosure_firmware to a higher version than tesm28b-1.21,and avoid the version (,tesm28b-1.21); Upgrade lenovo thinksystem_d2_enclosure_firmware to a higher version than tesm28b-1.21,and avoid the version (,tesm28b-1.21); Upgrade ibm nextscale_fan_power_controller_firmware to a higher version than 44a-3.70,and avoid the version (,44a-3.70)