Description
GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
GIGABYTE GB-BSi7H-6500
F6affected
GIGABYTE GB-BXi7-5775
F2affected
References
- https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-001.md ↗
- https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-002.md ↗
- https://www.kb.cert.org/vuls/id/507496 ↗
- http://www.securityfocus.com/bid/97294 ↗
- https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.html ↗