CVE-2015-5684

CRITICAL

9.8

CVSS Score

Published: March 27, 2020 at 02:05 PM UTC

Updated: June 17, 2026 at 12:29 AM UTC

54 products affected across 1 vendorIdeapad 100-15iby FirmwareZ41-70 FirmwareG50-80 Touch V3000 Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

CRITICAL9.8

Exploit prediction

EPSS 4%

Description

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly disclosed in 2015) in the Lenovo Service Engine (LSE), affecting various versions of BIOS for Lenovo Notebooks, that could allow a remote user to execute arbitrary code on the system.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

B50-10 Firmware · Lenovo

95%

v < cccn13ww(v1.02)

Affected range stops below cccn13ww(v1.02), so it looks safe — our inference, not a vendor statement

lenovo-b50-10 (same device)

Edge 15 Firmware · Lenovo

95%

v < a9cn46wwv < b9cn17ww

Affected range stops below a9cn46ww, so it looks safe — our inference, not a vendor statement

Affected range stops below b9cn17ww, so it looks safe — our inference, not a vendor statement

lenovo-edge-15 (same device)

Flex 2 Pro 15 Firmware · Lenovo

95%

v < a9cn46wwv < b9cn17ww

Affected range stops below a9cn46ww, so it looks safe — our inference, not a vendor statement

Affected range stops below b9cn17ww, so it looks safe — our inference, not a vendor statement

lenovo-flex-2-pro-15 (same device)

Flex 3-1120 Firmware · Lenovo

95%

v < c0cn25ww

Affected range stops below c0cn25ww, so it looks safe — our inference, not a vendor statement

lenovo-flex-3-1120 (same device)

Flex 3-1470 Firmware · Lenovo

95%

v < bdcn30ww

Affected range stops below bdcn30ww, so it looks safe — our inference, not a vendor statement

lenovo-flex-3-1470 (same device)

Flex 3-1570 Firmware · Lenovo

95%

v < bdcn30ww

Affected range stops below bdcn30ww, so it looks safe — our inference, not a vendor statement

lenovo-flex-3-1570 (same device)

G40-80 Firmware · Lenovo

95%

v < b0cn75ww

Affected range stops below b0cn75ww, so it looks safe — our inference, not a vendor statement

lenovo-g40-80 (same device)

G40-80m Firmware · Lenovo

95%

v < cbcn75ww

Affected range stops below cbcn75ww, so it looks safe — our inference, not a vendor statement

lenovo-g40-80m (same device)

G50-80 Firmware · Lenovo

95%

v < b0cn75ww

Affected range stops below b0cn75ww, so it looks safe — our inference, not a vendor statement

lenovo-g50-80 (same device)

G50-80 Touch Firmware · Lenovo

95%

v < b0cn75ww

Affected range stops below b0cn75ww, so it looks safe — our inference, not a vendor statement

lenovo-g50-80-touch (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://support.lenovo.com/us/en/product_security/lse_bios_notebook

References (1)

x_refsource_MISCVendor Advisory

Source: [email protected]

https://support.lenovo.com/us/en/product_security/lse_bios_notebook

CVSS

9.8CRITICAL[email protected]

Attack Vector: NETWORK
Complexity: LOW
Privileges: NONE
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-120

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card