What’s Vulnerable › Vulnerabilities

CVE-2017-3197: GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-07-09 · updated 2026-06-17
• Weakness: CWE-693

Description

GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.

Affected products

• Gigabyte Gb-Bsi7H-6500 Firmware: f6
• Gigabyte Gb-Bxi7-5775 Firmware: f2

References

• http://www.securityfocus.com/bid/97294
• https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-001.md
• https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-002.md
• https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.html
• https://www.kb.cert.org/vuls/id/507496
• http://www.securityfocus.com/bid/97294
• https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-001.md
• https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-002.md
• https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.html
• https://www.kb.cert.org/vuls/id/507496

Get alerted when CVE-2017-3197 or the next vulnerability affects your stack