CVE-2017-3197

GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.

Score
CVSS 3.0 9.8 Critical
Status
Modified - cret@cert.org
Published
2018-07-09
Last modified
2024-08-05
Weaknesses
CWE-20, CWE-693

Affected products

References