Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-3198

GIGABYTE BRIX UEFI firmware is not cryptographically signed

Description

GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served over HTTP. An attacker can make arbitrary modifications to firmware images without being detected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GIGABYTE GB-BSi7H-6500

  • F6affected

GIGABYTE GB-BXi7-5775

  • F2affected

References