CVEvulnerability
CVE-2017-3197
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-07-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20, CWE-693
Description
GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.
Affected configurations
• gigabyte gb-bsi7h-6500 firmware f6
• gigabyte gb-bxi7-5775 firmware f2
Related
References
- http://www.securityfocus.com/bid/97294 Third Party Advisory, VDB Entry
- https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-001.md Exploit, Third Party Advisory
- https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-002.md Exploit, Third Party Advisory
- https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.html Exploit, Third Party Advisory
- https://www.kb.cert.org/vuls/id/507496 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/97294 Third Party Advisory, VDB Entry
- https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-001.md Exploit, Third Party Advisory
- https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-002.md Exploit, Third Party Advisory
- https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.html Exploit, Third Party Advisory
- https://www.kb.cert.org/vuls/id/507496 Third Party Advisory, US Government Resource