CVE:CVE-2015-5684
CNNVD:CNNVD-201512-682
Lenovo Service Engine（LSE）是中国联想（Lenovo）公司的一款BIOS中的实用程序，它可帮助用户将名为OneKey Optimizer的程序下载到某些未安装Lenovo预加载操作系统的Lenovo笔记本电脑系统上。
Lenovo LSE中存在缓冲区错误漏洞。远程攻击者可利用该漏洞在系统上运行任意代码。以下产品及版本受到影响：B50-10；Flex 2 Pro-15/Edge 15 (Broadwell)；Flex 2 Pro-15/Edge 15 (Haswell)；Flex 3-1470/1570；Flex 3-1120；G40-80/G50-80/G50-80 Touch/V3000；G40-80m/G50-80m；Ideapad 100-14IBY；Ideapad 100-15IBY；S21e；S41-70/U41-70；S435/M40-35；U31-70；Yoga3 14；Yoga 3 11；Y40-80；Z41-70/Z51-70；Z70-80 / G70-80。
solution:Upgrade lenovo b50-10_firmware to a higher version than cccn13ww\(v1.02\,and avoid the version (,cccn13ww\(v1.02\)); Upgrade lenovo flex_2_pro-15_firmware to a higher version than a9cn46ww,b9cn17ww,and avoid the version (,a9cn46ww),(,b9cn17ww); Upgrade lenovo edge_15_firmware to a higher version than a9cn46ww,b9cn17ww,and avoid the version (,a9cn46ww),(,b9cn17ww); Upgrade lenovo flex_3-1470_firmware to a higher version than bdcn30ww,and avoid the version (,bdcn30ww); Upgrade lenovo flex_3-1570_firmware to a higher version than bdcn30ww,and avoid the version (,bdcn30ww); Upgrade lenovo flex_3-1120_firmware to a higher version than c0cn25ww,and avoid the version (,c0cn25ww); Upgrade lenovo g40-80_firmware to a higher version than b0cn75ww,and avoid the version (,b0cn75ww); Upgrade lenovo g50-80_firmware to a higher version than b0cn75ww,and avoid the version (,b0cn75ww); Upgrade lenovo g50-80_touch_firmware to a higher version than b0cn75ww,and avoid the version (,b0cn75ww); Upgrade lenovo g50-80_touch_v3000_firmware to a higher version than b0cn75ww,and avoid the version (,b0cn75ww); Upgrade lenovo g40-80m_firmware to a higher version than cbcn75ww,and avoid the version (,cbcn75ww); Upgrade lenovo g50-80m_firmware to a higher version than cbcn75ww,and avoid the version (,cbcn75ww); Upgrade lenovo ideapad_100-14iby_firmware to a higher version than v1.02_\(cccn13ww\,and avoid the version (,v1.02_\(cccn13ww\)); Upgrade lenovo ideapad_100-15iby_firmware to a higher version than v1.02_\(cccn13ww\,and avoid the version (,v1.02_\(cccn13ww\)); Upgrade lenovo s21e_firmware to a higher version than c4cn14ww\(v1.04\,and avoid the version (,c4cn14ww\(v1.04\)); Upgrade lenovo s41-70_firmware to a higher version than bdcn30ww,and avoid the version (,bdcn30ww); Upgrade lenovo u41-70_firmware to a higher version than bdcn30ww,and avoid the version (,bdcn30ww); Upgrade lenovo s435_firmware to a higher version than bbcn15ww\(v1.06\,and avoid the version (,bbcn15ww\(v1.06\)); Upgrade lenovo m40-35_firmware to a higher version than bbcn15ww\(v1.06\,and avoid the version (,bbcn15ww\(v1.06\)); Upgrade lenovo u31-70_firmware to a higher version than afcn30ww\(v2.02\,and avoid the version (,afcn30ww\(v2.02\)); Upgrade lenovo yoga_3_14_firmware to a higher version than bacn33ww,and avoid the version (,bacn33ww); Upgrade lenovo yoga_3_11_firmware to a higher version than b8cn30ww\(v2.08\,and avoid the version (,b8cn30ww\(v2.08\)); Upgrade lenovo y40-80_firmware to a higher version than b5cn36ww\(v2.02\,and avoid the version (,b5cn36ww\(v2.02\)); Upgrade lenovo z41-70_firmware to a higher version than c2cn18ww\(v1.04\,and avoid the version (,c2cn18ww\(v1.04\)); Upgrade lenovo z51-70_firmware to a higher version than c2cn18ww\(v1.04\,and avoid the version (,c2cn18ww\(v1.04\)); Upgrade lenovo z70-80_firmware to a higher version than abcn75ww,and avoid the version (,abcn75ww); Upgrade lenovo g70-80_firmware to a higher version than abcn75ww,and avoid the version (,abcn75ww)