Riskcovery

CVE-2017-3197

GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection

State
Published
Severity
Not scored
Published
Jul 9, 2018
Updated
Aug 5, 2024
Reserved
Dec 5, 2016

Read the record on cve.org

Description

GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-693 Protection Mechanism Failure

Affected Products

ProductVersions
GB-BSi7H-6500GIGABYTE
  • F6Affected
GB-BXi7-5775GIGABYTE
  • F2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.