Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2015-5684 Details

Description

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly disclosed in 2015) in the Lenovo Service Engine (LSE), affecting various versions of BIOS for Lenovo Notebooks, that could allow a remote user to execute arbitrary code on the system.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://support.lenovo.com/us/en/product_security/lse_bios_notebook	CVE	Vendor Advisory
https://support.lenovo.com/us/en/product_security/lse_bios_notebook	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')	[email protected]

Affected Products

Product	Versions
lenovo b50-10 firmware	< cccn13ww\(v1.02\)
CPE cpe:2.3:o:lenovo:b50-10_firmware:::::::: Remediation No remediation found in references.
lenovo b50-10	All versions
CPE cpe:2.3:h:lenovo:b50-10:-:::::::* Remediation No remediation found in references.
lenovo flex 2 pro-15 firmware	< a9cn46ww < b9cn17ww
CPE cpe:2.3:o:lenovo:flex_2_pro-15_firmware:::::::: Remediation No remediation found in references.
lenovo flex 2 pro-15	All versions
CPE cpe:2.3:h:lenovo:flex_2_pro-15:-:::::::* Remediation No remediation found in references.
lenovo edge 15 firmware	< a9cn46ww < b9cn17ww
CPE cpe:2.3:o:lenovo:edge_15_firmware:::::::: Remediation No remediation found in references.
lenovo edge 15	All versions
CPE cpe:2.3:h:lenovo:edge_15:-:::::::* Remediation No remediation found in references.
lenovo flex 3-1470 firmware	< bdcn30ww
CPE cpe:2.3:o:lenovo:flex_3-1470_firmware:::::::: Remediation No remediation found in references.
lenovo flex 3-1470	All versions
CPE cpe:2.3:h:lenovo:flex_3-1470:-:::::::* Remediation No remediation found in references.
lenovo flex 3-1570 firmware	< bdcn30ww
CPE cpe:2.3:o:lenovo:flex_3-1570_firmware:::::::: Remediation No remediation found in references.
lenovo flex 3-1570	All versions
CPE cpe:2.3:h:lenovo:flex_3-1570:-:::::::* Remediation No remediation found in references.
lenovo flex 3-1120 firmware	< c0cn25ww
CPE cpe:2.3:o:lenovo:flex_3-1120_firmware:::::::: Remediation No remediation found in references.
lenovo flex 3-1120	All versions
CPE cpe:2.3:h:lenovo:flex_3-1120:-:::::::* Remediation No remediation found in references.
lenovo g40-80 firmware	< b0cn75ww
CPE cpe:2.3:o:lenovo:g40-80_firmware:::::::: Remediation No remediation found in references.
lenovo g40-80	All versions
CPE cpe:2.3:h:lenovo:g40-80:-:::::::* Remediation No remediation found in references.
lenovo g50-80 firmware	< b0cn75ww
CPE cpe:2.3:o:lenovo:g50-80_firmware:::::::: Remediation No remediation found in references.
lenovo g50-80	All versions
CPE cpe:2.3:h:lenovo:g50-80:-:::::::* Remediation No remediation found in references.
lenovo g50-80 touch firmware	< b0cn75ww
CPE cpe:2.3:o:lenovo:g50-80_touch_firmware:::::::: Remediation No remediation found in references.
lenovo g50-80 touch	All versions
CPE cpe:2.3:h:lenovo:g50-80_touch:-:::::::* Remediation No remediation found in references.
lenovo g50-80 touch v3000 firmware	< b0cn75ww
CPE cpe:2.3:o:lenovo:g50-80_touch_v3000_firmware:::::::: Remediation No remediation found in references.
lenovo g50-80 touch v3000	All versions
CPE cpe:2.3:h:lenovo:g50-80_touch_v3000:-:::::::* Remediation No remediation found in references.
lenovo g40-80m firmware	< cbcn75ww
CPE cpe:2.3:o:lenovo:g40-80m_firmware:::::::: Remediation No remediation found in references.
lenovo g40-80m	All versions
CPE cpe:2.3:h:lenovo:g40-80m:-:::::::* Remediation No remediation found in references.
lenovo g50-80m firmware	< cbcn75ww
CPE cpe:2.3:o:lenovo:g50-80m_firmware:::::::: Remediation No remediation found in references.
lenovo g50-80m	All versions
CPE cpe:2.3:h:lenovo:g50-80m:-:::::::* Remediation No remediation found in references.
lenovo ideapad 100-14iby firmware	< v1.02_\(cccn13ww\)
CPE cpe:2.3:o:lenovo:ideapad_100-14iby_firmware:::::::: Remediation No remediation found in references.
lenovo ideapad 100-14iby	All versions
CPE cpe:2.3:h:lenovo:ideapad_100-14iby:-:::::::* Remediation No remediation found in references.
lenovo ideapad 100-15iby firmware	< v1.02_\(cccn13ww\)
CPE cpe:2.3:o:lenovo:ideapad_100-15iby_firmware:::::::: Remediation No remediation found in references.
lenovo ideapad 100-15iby	All versions
CPE cpe:2.3:h:lenovo:ideapad_100-15iby:-:::::::* Remediation No remediation found in references.
lenovo s21e firmware	< c4cn14ww\(v1.04\)
CPE cpe:2.3:o:lenovo:s21e_firmware:::::::: Remediation No remediation found in references.
lenovo s21e	All versions
CPE cpe:2.3:h:lenovo:s21e:-:::::::* Remediation No remediation found in references.
lenovo s41-70 firmware	< bdcn30ww
CPE cpe:2.3:o:lenovo:s41-70_firmware:::::::: Remediation No remediation found in references.
lenovo s41-70	All versions
CPE cpe:2.3:h:lenovo:s41-70:-:::::::* Remediation No remediation found in references.
lenovo u41-70 firmware	< bdcn30ww
CPE cpe:2.3:o:lenovo:u41-70_firmware:::::::: Remediation No remediation found in references.
lenovo u41-70	All versions
CPE cpe:2.3:h:lenovo:u41-70:-:::::::* Remediation No remediation found in references.
lenovo s435 firmware	< bbcn15ww\(v1.06\)
CPE cpe:2.3:o:lenovo:s435_firmware:::::::: Remediation No remediation found in references.
lenovo s435	All versions
CPE cpe:2.3:h:lenovo:s435:-:::::::* Remediation No remediation found in references.
lenovo m40-35 firmware	< bbcn15ww\(v1.06\)
CPE cpe:2.3:o:lenovo:m40-35_firmware:::::::: Remediation No remediation found in references.
lenovo m40-35	All versions
CPE cpe:2.3:h:lenovo:m40-35:-:::::::* Remediation No remediation found in references.
lenovo u31-70 firmware	< afcn30ww\(v2.02\)
CPE cpe:2.3:o:lenovo:u31-70_firmware:::::::: Remediation No remediation found in references.
lenovo u31-70	All versions
CPE cpe:2.3:h:lenovo:u31-70:-:::::::* Remediation No remediation found in references.
lenovo yoga 3 14 firmware	< bacn33ww
CPE cpe:2.3:o:lenovo:yoga_3_14_firmware:::::::: Remediation No remediation found in references.
lenovo yoga 3 14	All versions
CPE cpe:2.3:h:lenovo:yoga_3_14:-:::::::* Remediation No remediation found in references.
lenovo yoga 3 11 firmware	< b8cn30ww\(v2.08\)
CPE cpe:2.3:o:lenovo:yoga_3_11_firmware:::::::: Remediation No remediation found in references.
lenovo yoga 3 11	All versions
CPE cpe:2.3:h:lenovo:yoga_3_11:-:::::::* Remediation No remediation found in references.
lenovo y40-80 firmware	< b5cn36ww\(v2.02\)
CPE cpe:2.3:o:lenovo:y40-80_firmware:::::::: Remediation No remediation found in references.
lenovo y40-80	All versions
CPE cpe:2.3:h:lenovo:y40-80:-:::::::* Remediation No remediation found in references.
lenovo z41-70 firmware	< c2cn18ww\(v1.04\)
CPE cpe:2.3:o:lenovo:z41-70_firmware:::::::: Remediation No remediation found in references.
lenovo z41-70	All versions
CPE cpe:2.3:h:lenovo:z41-70:-:::::::* Remediation No remediation found in references.
lenovo z51-70 firmware	< c2cn18ww\(v1.04\)
CPE cpe:2.3:o:lenovo:z51-70_firmware:::::::: Remediation No remediation found in references.
lenovo z51-70	All versions
CPE cpe:2.3:h:lenovo:z51-70:-:::::::* Remediation No remediation found in references.
lenovo z70-80 firmware	< abcn75ww
CPE cpe:2.3:o:lenovo:z70-80_firmware:::::::: Remediation No remediation found in references.
lenovo z70-80	All versions
CPE cpe:2.3:h:lenovo:z70-80:-:::::::* Remediation No remediation found in references.
lenovo g70-80 firmware	< abcn75ww
CPE cpe:2.3:o:lenovo:g70-80_firmware:::::::: Remediation No remediation found in references.
lenovo g70-80	All versions
CPE cpe:2.3:h:lenovo:g70-80:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Apr 1, 2020	Initial Analysis	[email protected]

CVE-2015-5684 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation