CVE-2017-3198 GIGABYTE BRIX UEFI firmware is not cryptographically signed
Attackers can install malicious firmware on GIGABYTE BRIX devices due to missing cryptographic validation and HTTP updates, leading to persistent compromise.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-3198?
CVE-2017-3198 is a critical vulnerability in GIGABYTE GB-BSi7H-6500, published on 9 Jul 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served over HTTP. An attacker can make arbitrary modifications to firmware images without being detected.
Which versions are affected by CVE-2017-3198?
It affects 2 products.
Products include Gigabyte Gb-Bsi7h-6500 Firmware, Gigabyte Gb-Bxi7-5775 Firmware.
How do I fix CVE-2017-3198?
No fix has been published for CVE-2017-3198 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-3198 being exploited?
There is no known exploitation of CVE-2017-3198 in the wild and no public exploit code.
Other vulnerabilities in GIGABYTE GB-BSi7H-6500
Sources
Also known as GHSA-8mv4-x3gg-mm93.