CVE-2015-5684

https://notcve.org/view.php?id=CVE-2015-5684

27 Mar 2020 — MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly disclosed in 2015) in the Lenovo Service Engine (LSE), affecting various versions of BIOS for Lenovo Notebooks, that could allow a remote user to execute arbitrary code on the system. MITRE está completando este ID porque fue asignado antes de que Lenovo se convirtiera en un CNA. Se reportó una vulnerabilidad de desbordamiento del búfer (corregida y divulgada ... • https://support.lenovo.com/us/en/product_security/lse_bios_notebook • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •