{"id": "CVE-2015-5684", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2020-03-27T15:15:11.507", "references": [{"url": "https://support.lenovo.com/us/en/product_security/lse_bios_notebook", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-120"}]}], "descriptions": [{"lang": "en", "value": "MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly disclosed in 2015) in the Lenovo Service Engine (LSE), affecting various versions of BIOS for Lenovo Notebooks, that could allow a remote user to execute arbitrary code on the system."}, {"lang": "es", "value": "MITRE est\u00e1 completando este ID porque fue asignado antes de que Lenovo se convirtiera en un CNA. Se report\u00f3 una vulnerabilidad de desbordamiento del b\u00fafer (corregida y divulgada p\u00fablicamente en 2015) en el Lenovo Service Engine (LSE), afectando a varias versiones de BIOS para Lenovo Notebooks, que podr\u00eda permitir a un usuario remoto ejecutar c\u00f3digo arbitrario sobre el sistema."}], "lastModified": "2020-04-01T17:52:56.427", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:b50-10_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DAB13629-AAD9-4B7F-AD8B-CE428C9BCEBD", "versionEndExcluding": "cccn13ww\\(v1.02\\)"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:b50-10:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A46F63EE-B830-417D-A3FB-4A3CDE874C66"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:flex_2_pro-15_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21BE8590-FA0D-4D4D-A243-A53DBBF4E278", "versionEndExcluding": "a9cn46ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:flex_2_pro-15:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5CAC9F3E-6820-4562-8AB7-00D59AA3B63D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:edge_15_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5E7E194E-19AD-4180-8439-76F4EE8526FC", "versionEndExcluding": "a9cn46ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:edge_15:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6EA4E8A6-89ED-4F2A-8065-E4EDADB41988"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:edge_15_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1339A02-9DED-496A-9481-2CF946F61617", "versionEndExcluding": "b9cn17ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:edge_15:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6EA4E8A6-89ED-4F2A-8065-E4EDADB41988"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:flex_2_pro-15_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62F2E97D-A18D-4398-B7D8-FE43BFC278A7", "versionEndExcluding": "b9cn17ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:flex_2_pro-15:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5CAC9F3E-6820-4562-8AB7-00D59AA3B63D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:flex_3-1470_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "180AE5DE-0EB5-4401-8DB8-D123275CF4E2", "versionEndExcluding": "bdcn30ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:flex_3-1470:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B7CFCB4F-0E2E-4F96-B12A-34DD43E627FC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:flex_3-1570_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30DFF3B4-75C4-4A57-A4C1-E77855DDAEB5", "versionEndExcluding": "bdcn30ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:flex_3-1570:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4E3D5513-6F24-4E8A-B150-D24B1CEF49A7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:flex_3-1120_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34BD31D2-EA1B-4593-B549-4DA3D32C62EA", "versionEndExcluding": "c0cn25ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:flex_3-1120:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F30C6DA5-EF4D-4B14-942D-1C282EEC9125"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:g40-80_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "319871AB-029B-4525-B6DF-B3967206F7A6", "versionEndExcluding": "b0cn75ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:g40-80:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "691490F2-3D6B-49C9-BB53-EC4329687E9A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:g50-80_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A5FAB0F-4257-4C3D-B6D0-409B11ECC9AF", "versionEndExcluding": "b0cn75ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:g50-80:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E1E7BB87-339E-4171-A63D-AC7872F36E69"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:g50-80_touch_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6FF408D-F653-4FDB-8207-0C7CC7107B1D", "versionEndExcluding": "b0cn75ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:g50-80_touch:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "45C10812-9203-44EC-8491-23E3EE411378"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:g50-80_touch_v3000_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB139F01-D3C0-4C21-86F7-38509960DE8B", "versionEndExcluding": "b0cn75ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:g50-80_touch_v3000:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3A973958-1180-4A49-AFF2-5148A45CC165"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:g40-80m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C05723DF-5379-4F19-81FD-329D6F331DCE", "versionEndExcluding": "cbcn75ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:g40-80m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C1378C04-CBDC-404F-A9AD-DDD967D075F8"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:g50-80m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB056BC9-AD47-4E77-B503-C4B9FCD247E5", "versionEndExcluding": "cbcn75ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:g50-80m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EC28D3F0-0F05-493B-9503-5EF5E0DBAA9F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:ideapad_100-14iby_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15C12265-C618-4F5F-936A-B941E362DDAE", "versionEndExcluding": "v1.02_\\(cccn13ww\\)"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:ideapad_100-14iby:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F203A8F3-92B7-4A04-9B7B-25CA241CA391"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:ideapad_100-15iby_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08F61F2E-36A9-4792-8872-88D5DCFED2E3", "versionEndExcluding": "v1.02_\\(cccn13ww\\)"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:ideapad_100-15iby:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2ED391E7-819D-4DFA-B22B-32DFE09386E1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s21e_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF4D6D43-092E-42CD-88C7-FEFE6EBF63CC", "versionEndExcluding": "c4cn14ww\\(v1.04\\)"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s21e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BF96C999-9C8A-4AE6-AB93-8B82E0823C44"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s41-70_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0A6ADB8-F77A-45D5-A4A7-5659EE309A32", "versionEndExcluding": "bdcn30ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s41-70:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3C4575D4-8467-4A70-89FD-86303799E20E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:u41-70_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C968254F-2C69-4622-BC6D-F34430C26E4A", "versionEndExcluding": "bdcn30ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:u41-70:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "82F08144-BFDB-4DA8-AC1C-94056E550BA1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s435_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC50683B-082F-45B0-835F-BA0056370333", "versionEndExcluding": "bbcn15ww\\(v1.06\\)"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s435:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8F446E58-66D3-4B97-B0C2-108EE3085251"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:m40-35_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA03246F-B94D-417F-B8B2-9FF099C5F652", "versionEndExcluding": "bbcn15ww\\(v1.06\\)"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:m40-35:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5D1DE90C-7B1E-4B4B-A575-9084F25D5CD2"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:u31-70_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30B533EC-3BE9-4755-8672-D435FD5D6F73", "versionEndExcluding": "afcn30ww\\(v2.02\\)"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:u31-70:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AAE3E372-D6EA-4A06-B099-FAFC4B98DBA8"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yoga_3_14_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5B4F2A6-5CC0-4D51-BEE4-8C631E7AAC79", "versionEndExcluding": "bacn33ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yoga_3_14:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7942EB0C-6DCE-4809-BA5B-203A081BC98D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yoga_3_11_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FBD8F411-170D-4C9D-9783-D3A9F3E8AB20", "versionEndExcluding": "b8cn30ww\\(v2.08\\)"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yoga_3_11:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3C26A890-F6A6-4F20-ACB9-B6EC9E01B77B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:y40-80_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26D8E863-B2AC-4B2D-8B84-977A72F3C884", "versionEndExcluding": "b5cn36ww\\(v2.02\\)"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:y40-80:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4D27B443-54A7-4C27-84C8-8908DB1777A0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:z41-70_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "702DC351-05BC-43FB-900C-67DAAD351323", "versionEndExcluding": "c2cn18ww\\(v1.04\\)"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:z41-70:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8FC45207-5619-4E66-9A8E-20B5C77DCB81"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:z51-70_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5B7401A-DB28-4003-8DD5-1BD3AB136E48", "versionEndExcluding": "c2cn18ww\\(v1.04\\)"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:z51-70:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FB8E3DDB-31C2-4BA5-B763-5895B2E045CD"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:z70-80_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E2C802D-2F43-4066-9725-60022D3AC10B", "versionEndExcluding": "abcn75ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:z70-80:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0FD32560-A09D-457F-8FE8-A963F463C139"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:g70-80_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5E47AA7-107B-4E26-8CE4-F389242759DA", "versionEndExcluding": "abcn75ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:g70-80:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "01DAC7FE-64E8-473A-BE00-B3D457B402AA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}
