CVE-2015-5684
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly disclosed in 2015) in the Lenovo Service Engine (LSE), affecting various versions of BIOS for Lenovo Notebooks, that could allow a remote user to execute arbitrary code on the system.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2020-03-27
- Last modified
- 2024-08-06
- Weaknesses
- CWE-120
Affected products
- B50-10 Firmware (Lenovo)
- Edge 15 Firmware (Lenovo)
- Flex 2 Pro-15 Firmware (Lenovo)
- Flex 3-1120 Firmware (Lenovo)
- Flex 3-1470 Firmware (Lenovo)
- Flex 3-1570 Firmware (Lenovo)
- G40-80 Firmware (Lenovo)
- G40-80m Firmware (Lenovo)
- G50-80 Firmware (Lenovo)
- G50-80 Touch Firmware (Lenovo)
- G50-80 Touch V3000 Firmware (Lenovo)
- G50-80m Firmware (Lenovo)
- G70-80 Firmware (Lenovo)
- Ideapad 100-14iby Firmware (Lenovo)
- Ideapad 100-15iby Firmware (Lenovo)
- M40-35 Firmware (Lenovo)
- S21e Firmware (Lenovo)
- S41-70 Firmware (Lenovo)
- S435 Firmware (Lenovo)
- U31-70 Firmware (Lenovo)
- U41-70 Firmware (Lenovo)
- Y40-80 Firmware (Lenovo)
- Yoga 3 11 Firmware (Lenovo)
- Yoga 3 14 Firmware (Lenovo)
- Z41-70 Firmware (Lenovo)
- Z51-70 Firmware (Lenovo)
- Z70-80 Firmware (Lenovo)
References
- https://support.lenovo.com/us/en/product_security/lse_bios_notebook
