10
CVSSv2

CVE-2015-5684

Published: 27/03/2020 Updated: 01/04/2020
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly disclosed in 2015) in the Lenovo Service Engine (LSE), affecting various versions of BIOS for Lenovo Notebooks, that could allow a remote user to execute arbitrary code on the system.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

lenovo b50-10_firmware

lenovo flex_2_pro-15_firmware

lenovo edge_15_firmware

lenovo flex_3-1470_firmware

lenovo flex_3-1570_firmware

lenovo flex_3-1120_firmware

lenovo g40-80_firmware

lenovo g50-80_firmware

lenovo g50-80_touch_firmware

lenovo g50-80_touch_v3000_firmware

lenovo g40-80m_firmware

lenovo g50-80m_firmware

lenovo ideapad_100-14iby_firmware

lenovo ideapad_100-15iby_firmware

lenovo s21e_firmware

lenovo s41-70_firmware

lenovo u41-70_firmware

lenovo s435_firmware

lenovo m40-35_firmware

lenovo u31-70_firmware

lenovo yoga_3_14_firmware

lenovo yoga_3_11_firmware

lenovo y40-80_firmware

lenovo z41-70_firmware

lenovo z51-70_firmware

lenovo z70-80_firmware

lenovo g70-80_firmware