CVE-2017-3197
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.
Affected (2)
Products: Gigabyte: Gb Bsi7h 6500 Firmware, Gb Bxi7 5775 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version f6 |
| Running on/with | Platform Versions |
|---|---|
Gigabyte Gb Bsi7h 6500 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version f2 |
| Running on/with | Platform Versions |
|---|---|
Gigabyte Gb Bxi7 5775 | All versions |
Related CWEs
CWE-20
Improper Input Validation
The product receives input or data, but it does
not validate or incorrectly validates that the input has the
properties that are required to process the data safely and
correctly.
CWE-693
Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
References (10)
Source: cret@cert.org
ExploitThird Party Advisory
Source: cret@cert.org
ExploitThird Party Advisory
Source: cret@cert.org
ExploitThird Party Advisory
Source: cret@cert.org
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Timeline
No history available yet.