CVE-2015-5684
Critical
Description
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly disclosed in 2015) in the Lenovo Service Engine (LSE), affecting various versions of BIOS for Lenovo Notebooks, that could allow a remote user to execute arbitrary code on the system.
SeverityCritical
CVSS9.8
Exploit probability—
ProductLenovo B50-10 Firmware
PublishedMar 27, 2020
First seenMar 27, 2020
How to fix
Update
- lenovo b50-10_firmwarecccn13ww\(v1.02\) or later
- lenovo flex_2_pro-15_firmwarea9cn46ww, b9cn17ww or later
- lenovo edge_15_firmwarea9cn46ww, b9cn17ww or later
- lenovo flex_3-1470_firmwarebdcn30ww or later
- lenovo flex_3-1570_firmwarebdcn30ww or later
- lenovo flex_3-1120_firmwarec0cn25ww or later
- lenovo g40-80_firmwareb0cn75ww or later
- lenovo g50-80_firmwareb0cn75ww or later
- lenovo g50-80_touch_firmwareb0cn75ww or later
- lenovo g50-80_touch_v3000_firmwareb0cn75ww or later
- lenovo g40-80m_firmwarecbcn75ww or later
- lenovo g50-80m_firmwarecbcn75ww or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo b50-10_firmware | v < cccn13ww\(v1.02\) | cccn13ww\(v1.02\) |
| lenovo flex_2_pro-15_firmware | v < a9cn46ww, v < b9cn17ww | a9cn46ww, b9cn17ww |
| lenovo edge_15_firmware | v < a9cn46ww, v < b9cn17ww | a9cn46ww, b9cn17ww |
| lenovo flex_3-1470_firmware | v < bdcn30ww | bdcn30ww |
| lenovo flex_3-1570_firmware | v < bdcn30ww | bdcn30ww |
| lenovo flex_3-1120_firmware | v < c0cn25ww | c0cn25ww |
| lenovo g40-80_firmware | v < b0cn75ww | b0cn75ww |
| lenovo g50-80_firmware | v < b0cn75ww | b0cn75ww |
| lenovo g50-80_touch_firmware | v < b0cn75ww | b0cn75ww |
| lenovo g50-80_touch_v3000_firmware | v < b0cn75ww | b0cn75ww |
| lenovo g40-80m_firmware | v < cbcn75ww | cbcn75ww |
| lenovo g50-80m_firmware | v < cbcn75ww | cbcn75ww |
| lenovo ideapad_100-14iby_firmware | v < v1.02_\(cccn13ww\) | v1.02_\(cccn13ww\) |
| lenovo ideapad_100-15iby_firmware | v < v1.02_\(cccn13ww\) | v1.02_\(cccn13ww\) |
| lenovo s21e_firmware | v < c4cn14ww\(v1.04\) | c4cn14ww\(v1.04\) |
| lenovo s41-70_firmware | v < bdcn30ww | bdcn30ww |
| lenovo u41-70_firmware | v < bdcn30ww | bdcn30ww |
| lenovo s435_firmware | v < bbcn15ww\(v1.06\) | bbcn15ww\(v1.06\) |
| lenovo m40-35_firmware | v < bbcn15ww\(v1.06\) | bbcn15ww\(v1.06\) |
| lenovo u31-70_firmware | v < afcn30ww\(v2.02\) | afcn30ww\(v2.02\) |
| lenovo yoga_3_14_firmware | v < bacn33ww | bacn33ww |
| lenovo yoga_3_11_firmware | v < b8cn30ww\(v2.08\) | b8cn30ww\(v2.08\) |
| lenovo y40-80_firmware | v < b5cn36ww\(v2.02\) | b5cn36ww\(v2.02\) |
| lenovo z41-70_firmware | v < c2cn18ww\(v1.04\) | c2cn18ww\(v1.04\) |
| lenovo z51-70_firmware | v < c2cn18ww\(v1.04\) | c2cn18ww\(v1.04\) |
| lenovo z70-80_firmware | v < abcn75ww | abcn75ww |
| lenovo g70-80_firmware | v < abcn75ww | abcn75ww |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.