CVE-2017-3197 GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection
Attackers can bypass BIOS write protection to modify SPI flash, enabling persistent code execution and privilege escalation on GIGABYTE BRIX devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-3197?
CVE-2017-3197 is a critical vulnerability in GIGABYTE GB-BSi7H-6500, published on 9 Jul 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.
Which versions are affected by CVE-2017-3197?
It affects 2 products.
Products include Gigabyte Gb-Bsi7h-6500 Firmware, Gigabyte Gb-Bxi7-5775 Firmware.
How do I fix CVE-2017-3197?
No fix has been published for CVE-2017-3197 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-3197 being exploited?
There is no known exploitation of CVE-2017-3197 in the wild and no public exploit code.
Other vulnerabilities in GIGABYTE GB-BSi7H-6500
Sources
Also known as GHSA-r83h-qmfh-pxvf.