CVE-2017-3197 GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection
CriticalCVSS 9.8
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gigabyte gb-bsi7h-6500 firmware | = f6 | No fix listed |
| gigabyte gb-bxi7-5775 firmware | = f2 | No fix listed |
| gigabyte GB-BSi7H-6500 | = F6 | No fix listed |
| gigabyte GB-BXi7-5775 | = F2 | No fix listed |
References
- 97294 third-party-advisory vdb-entry
- github.com exploit third-party-advisory
- github.com exploit third-party-advisory
- www.cylance.com exploit third-party-advisory
- VU#507496 third-party-advisory us-government-resource