CVE-2015-5684: Lenovo b50-10 Firmware

Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days.

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly disclosed in 2015) in the Lenovo Service Engine (LSE), affecting various versions of BIOS for Lenovo Notebooks, that could allow a remote user to execute arbitrary code on the system.

Affected products

  • Lenovo b50-10 Firmware: before cccn13ww\(v1.02\) (fixed in cccn13ww\(v1.02\))
  • Lenovo Edge 15 Firmware: before a9cn46ww (fixed in a9cn46ww); before b9cn17ww (fixed in b9cn17ww)
  • Lenovo Flex 2 Pro-15 Firmware: before a9cn46ww (fixed in a9cn46ww); before b9cn17ww (fixed in b9cn17ww)
  • Lenovo Flex 3-1120 Firmware: before c0cn25ww (fixed in c0cn25ww)
  • Lenovo Flex 3-1470 Firmware: before bdcn30ww (fixed in bdcn30ww)
  • Lenovo Flex 3-1570 Firmware: before bdcn30ww (fixed in bdcn30ww)
  • Lenovo g40-80 Firmware: before b0cn75ww (fixed in b0cn75ww)
  • Lenovo g40-80m Firmware: before cbcn75ww (fixed in cbcn75ww)
  • Lenovo g50-80 Firmware: before b0cn75ww (fixed in b0cn75ww)
  • Lenovo g50-80 Touch Firmware: before b0cn75ww (fixed in b0cn75ww)
  • Lenovo g50-80 Touch v3000 Firmware: before b0cn75ww (fixed in b0cn75ww)
  • Lenovo g50-80m Firmware: before cbcn75ww (fixed in cbcn75ww)
  • Lenovo g70-80 Firmware: before abcn75ww (fixed in abcn75ww)
  • Lenovo Ideapad 100-14iby Firmware: before v1.02_\(cccn13ww\) (fixed in v1.02_\(cccn13ww\))
  • Lenovo Ideapad 100-15iby Firmware: before v1.02_\(cccn13ww\) (fixed in v1.02_\(cccn13ww\))
  • Lenovo m40-35 Firmware: before bbcn15ww\(v1.06\) (fixed in bbcn15ww\(v1.06\))
  • Lenovo s21e Firmware: before c4cn14ww\(v1.04\) (fixed in c4cn14ww\(v1.04\))
  • Lenovo s41-70 Firmware: before bdcn30ww (fixed in bdcn30ww)
  • Lenovo s435 Firmware: before bbcn15ww\(v1.06\) (fixed in bbcn15ww\(v1.06\))
  • Lenovo u31-70 Firmware: before afcn30ww\(v2.02\) (fixed in afcn30ww\(v2.02\))
  • Lenovo u41-70 Firmware: before bdcn30ww (fixed in bdcn30ww)
  • Lenovo y40-80 Firmware: before b5cn36ww\(v2.02\) (fixed in b5cn36ww\(v2.02\))
  • Lenovo Yoga 3 11 Firmware: before b8cn30ww\(v2.08\) (fixed in b8cn30ww\(v2.08\))
  • Lenovo Yoga 3 14 Firmware: before bacn33ww (fixed in bacn33ww)
  • Lenovo z41-70 Firmware: before c2cn18ww\(v1.04\) (fixed in c2cn18ww\(v1.04\))
  • and 2 more

Published 2020-03-27. Last modified 2026-06-17.