CVE-2017-3197 GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection

2018-07-0919:00:00

CWE-693

certcc

www.cve.org

9.6 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.0%

JSON

GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.

CNA Affected

[
  {
    "product": "GB-BSi7H-6500",
    "vendor": "GIGABYTE",
    "versions": [
      {
        "status": "affected",
        "version": "F6"
      }
    ]
  },
  {
    "product": "GB-BXi7-5775",
    "vendor": "GIGABYTE",
    "versions": [
      {
        "status": "affected",
        "version": "F2"
      }
    ]
  }
]