critical9.8
CVE-2015-5684
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA.
Impact
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly disclosed in 2015) in the Lenovo Service Engine (LSE), affecting various versions of BIOS for Lenovo Notebooks, that could allow a remote user to execute arbitrary code on the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | B50-10 Firmware | before cccn13ww\(v1.02\) |
| Lenovo | Flex 2 Pro-15 Firmware | before a9cn46ww before b9cn17ww |
| Lenovo | Edge 15 Firmware | before a9cn46ww before b9cn17ww |
| Lenovo | Flex 3-1470 Firmware | before bdcn30ww |
| Lenovo | Flex 3-1570 Firmware | before bdcn30ww |
| Lenovo | Flex 3-1120 Firmware | before c0cn25ww |
| Lenovo | G40-80 Firmware | before b0cn75ww |
| Lenovo | G50-80 Firmware | before b0cn75ww |
| Lenovo | G50-80 Touch Firmware | before b0cn75ww |
| Lenovo | G50-80 Touch V3000 Firmware | before b0cn75ww |
| Lenovo | G40-80m Firmware | before cbcn75ww |
| Lenovo | G50-80m Firmware | before cbcn75ww |