CVE-2015-5684

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly disclosed in 2015) in the Lenovo Service Engine (LSE), affecting various versions of BIOS for Lenovo Notebooks, that could allow a remote user to execute arbitrary code on the system.

• lenovo b50-10 firmware (< cccn13ww\(v1.02\)) • lenovo flex 2 pro-15 firmware (< a9cn46ww) • lenovo edge 15 firmware (< a9cn46ww) • lenovo edge 15 firmware (< b9cn17ww) • lenovo flex 2 pro-15 firmware (< b9cn17ww) • lenovo flex 3-1470 firmware (< bdcn30ww) • lenovo flex 3-1570 firmware (< bdcn30ww) • lenovo flex 3-1120 firmware (< c0cn25ww) • lenovo g40-80 firmware (< b0cn75ww) • lenovo g50-80 firmware (< b0cn75ww) • lenovo g50-80 touch firmware (< b0cn75ww) • lenovo g50-80 touch v3000 firmware (< b0cn75ww) • lenovo g40-80m firmware (< cbcn75ww) • lenovo g50-80m firmware (< cbcn75ww) • lenovo ideapad 100-14iby firmware (< v1.02 \(cccn13ww\)) • lenovo ideapad 100-15iby firmware (< v1.02 \(cccn13ww\)) • lenovo s21e firmware (< c4cn14ww\(v1.04\)) • lenovo s41-70 firmware (< bdcn30ww) • lenovo u41-70 firmware (< bdcn30ww) • lenovo s435 firmware (< bbcn15ww\(v1.06\)) • lenovo m40-35 firmware (< bbcn15ww\(v1.06\)) • lenovo u31-70 firmware (< afcn30ww\(v2.02\)) • lenovo yoga 3 14 firmware (< bacn33ww) • lenovo yoga 3 11 firmware (< b8cn30ww\(v2.08\)) • lenovo y40-80 firmware (< b5cn36ww\(v2.02\)) • lenovo z41-70 firmware (< c2cn18ww\(v1.04\)) • lenovo z51-70 firmware (< c2cn18ww\(v1.04\)) • lenovo z70-80 firmware (< abcn75ww) • lenovo g70-80 firmware (< abcn75ww)