CVSS: 6.7EPSS: 0%CPEs: 346EXPL: 0CVE-2020-8321
https://notcve.org/view.php?id=CVE-2020-8321
09 Jun 2020 — A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution. Una potencial vulnerabilidad en la función de devolución de llamada SMI usada en el controlador System Lock Preinstallation en algunos modelos Lenovo Notebook y ThinkStation, puede permitir una ejecución de código arbitraria • https://support.lenovo.com/us/en/product_security/LEN-30042 •
CVSS: 10.0EPSS: 4%CPEs: 58EXPL: 0CVE-2015-5684
https://notcve.org/view.php?id=CVE-2015-5684
27 Mar 2020 — MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly disclosed in 2015) in the Lenovo Service Engine (LSE), affecting various versions of BIOS for Lenovo Notebooks, that could allow a remote user to execute arbitrary code on the system. MITRE está completando este ID porque fue asignado antes de que Lenovo se convirtiera en un CNA. Se reportó una vulnerabilidad de desbordamiento del búfer (corregida y divulgada ... • https://support.lenovo.com/us/en/product_security/lse_bios_notebook • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •