PT-2018-7246 · Gigabyte · Gigabyte Brix Uefi Firmware

Alex Matrosov · Published 2018-07-09 · Updated 2019-10-09 · CVE-2017-3197

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 version F6 GIGABYTE BRIX UEFI firmware for the GB-BXi7-5775 version F2

Description: The issue concerns the insecure implementation of certain features in the UEFI firmware, specifically BIOSWE, BLE, SMM BWP, and PRx. This insecurity allows for arbitrary write access to the BIOS, potentially enabling modifications to the SPI flash.

Recommendations: For GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 version F6, consider restricting access to the BIOS to prevent unauthorized modifications until a secure update is available. For GIGABYTE BRIX UEFI firmware for the GB-BXi7-5775 version F2, consider implementing additional security measures to protect the BIOS from arbitrary write access, such as secure boot mechanisms or flash protection, until a patch is released.

Exploit

Fix

Protection Mechanism Failure

RCE

Weakness Enumeration

CWE-693

CWE-20

Related Identifiers

CVE-2017-3197

Affected Products

Gigabyte Brix Uefi Firmware

References · 7

• 🔥 https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-001.md · Exploit
• 🔥 https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-002.md · Exploit
• 🔥 https://cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-3197 · Security Note
• https://osv.dev/vulnerability/CVE-2017-3197 · Vendor Advisory
• http://securityfocus.com/bid/97294 · Note
• https://kb.cert.org/vuls/id/507496 · Note