CVE-2017-3197
CRITICAL EXPLOITED IN THE WILD RANSOMWAREGIGABYTE BRIX UEFI - Info Disclosure
Title source: llmDescription
GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.
Scores
CVSS v3
9.8
EPSS
0.0284
EPSS Percentile
86.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitation Intel
VulnCheck KEV
2017-03-31
InTheWild.io
2022-02-01
Ransomware Use
Confirmed
Classification
CWE
CWE-20
CWE-693
Status
published
Affected Products (2)
gigabyte/gb-bsi7h-6500_firmware
gigabyte/gb-bxi7-5775_firmware
Timeline
Published
Jul 09, 2018
Tracked Since
Feb 18, 2026