CVE-2015-5684 MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly disclosed in 2015) in the Lenovo Service Engine (L...
CriticalCVSS 9.8
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly disclosed in 2015) in the Lenovo Service Engine (LSE), affecting various versions of BIOS for Lenovo Notebooks, that could allow a remote user to execute arbitrary code on the system.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo b50-10 firmware | < cccn13ww\(v1.02\) | cccn13ww\(v1.02\) |
| Lenovo flex 2 pro-15 firmware | < a9cn46ww | a9cn46ww |
| Lenovo flex 2 pro-15 firmware | < b9cn17ww | b9cn17ww |
| Lenovo edge 15 firmware | < a9cn46ww | a9cn46ww |
| Lenovo edge 15 firmware | < b9cn17ww | b9cn17ww |
| Lenovo flex 3-1470 firmware | < bdcn30ww | bdcn30ww |
| Lenovo flex 3-1570 firmware | < bdcn30ww | bdcn30ww |
| Lenovo flex 3-1120 firmware | < c0cn25ww | c0cn25ww |
| Lenovo g40-80 firmware | < b0cn75ww | b0cn75ww |
| Lenovo g50-80 firmware | < b0cn75ww | b0cn75ww |
| Lenovo g50-80 touch firmware | < b0cn75ww | b0cn75ww |
| Lenovo g50-80 touch v3000 firmware | < b0cn75ww | b0cn75ww |
| Lenovo g40-80m firmware | < cbcn75ww | cbcn75ww |
| Lenovo g50-80m firmware | < cbcn75ww | cbcn75ww |
| Lenovo ideapad 100-14iby firmware | < v1.02_\(cccn13ww\) | v1.02_\(cccn13ww\) |
| Lenovo ideapad 100-15iby firmware | < v1.02_\(cccn13ww\) | v1.02_\(cccn13ww\) |
| Lenovo s21e firmware | < c4cn14ww\(v1.04\) | c4cn14ww\(v1.04\) |
| Lenovo s41-70 firmware | < bdcn30ww | bdcn30ww |
| Lenovo u41-70 firmware | < bdcn30ww | bdcn30ww |
| Lenovo s435 firmware | < bbcn15ww\(v1.06\) | bbcn15ww\(v1.06\) |
| Lenovo m40-35 firmware | < bbcn15ww\(v1.06\) | bbcn15ww\(v1.06\) |
| Lenovo u31-70 firmware | < afcn30ww\(v2.02\) | afcn30ww\(v2.02\) |
| Lenovo yoga 3 14 firmware | < bacn33ww | bacn33ww |
| Lenovo yoga 3 11 firmware | < b8cn30ww\(v2.08\) | b8cn30ww\(v2.08\) |
| Lenovo y40-80 firmware | < b5cn36ww\(v2.02\) | b5cn36ww\(v2.02\) |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo z41-70 firmware | < c2cn18ww\(v1.04\) | c2cn18ww\(v1.04\) |
| Lenovo z51-70 firmware | < c2cn18ww\(v1.04\) | c2cn18ww\(v1.04\) |
| Lenovo z70-80 firmware | < abcn75ww | abcn75ww |
| Lenovo g70-80 firmware | < abcn75ww | abcn75ww |
References
- support.lenovo.com vendor-advisory