CVE-2017-3197

NONE EPSS 92.0%
Published Jul 9, 20187y ago · Modified Jun 17, 20262w ago
Find Similar
Published Jul 9, 2018 7y ago
Last Modified Jun 17, 2026 2w ago

Description

GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.

Threat Intelligence

EPSS Exploit Probability
92.0% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 2

CWE-20 Improper Input Validation Validation
CWE-693

Affected Products 4

VendorProductVersionRange
gigabytegb-bsi7h-6500_firmwaref6any
gigabytegb-bsi7h-6500*any
gigabytegb-bxi7-5775_firmwaref2any
gigabytegb-bxi7-5775*any

References 5

  • securityfocus.com http://www.securityfocus.com/bid/97294
    Third Party AdvisoryVDB Entry
  • github.com https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-001.md
    ExploitThird Party Advisory
  • github.com https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-002.md
    ExploitThird Party Advisory
  • cylance.com https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.html
    ExploitThird Party Advisory
  • kb.cert.org https://www.kb.cert.org/vuls/id/507496
    Third Party AdvisoryUS Government Resource

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.