CVE-2017-3197 in GB-BSi7H-6500

Summary

GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 12/05/2016
• Disclosure: 07/09/2018
• Moderation: VulDB entry created
• Entries: 1: VDB-120909
• CPE: ready
• CWE: CWE-20 (Confirmed)
• CVSS: 8.5
• EPSS: 0.02844
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-3197
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-3197
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-3197/