CVE-2017-3197observed exploitationCWE-693

CVE-2017-3197: vulnerability in GIGABYTE GB-BSi7H-6500

GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection

Published · Updated

Follow this CVE+ Monitor GB-BSi7H-6500+ Monitor GB-BXi7-5775

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

25Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendepss 5.6%
from disclosure to weapon
Published on NVDJul 9
VulnCheckMar 31
GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.
Affected products
GIGABYTE · GB-BSi7H-6500GIGABYTE · GB-BXi7-5775
Related CVEs — GIGABYTE GB-BSi7H-6500

In the same product, most dangerous first.

CVE-2017-3198—GIGABYTE BRIX UEFI firmware is not cryptographically signedEPSS 1.6%