CVE-2017-3197

GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.

• CWE-693
• CWE-20

• http://www.securityfocus.com/bid/97294Third Party Advisory, VDB Entry
• https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-001.mdExploit, Third Party Advisory
• https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-002.mdExploit, Third Party Advisory
• https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.htmlExploit, Third Party Advisory
• https://www.kb.cert.org/vuls/id/507496Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/97294Third Party Advisory, VDB Entry
• https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-001.mdExploit, Third Party Advisory
• https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-002.mdExploit, Third Party Advisory
• https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.htmlExploit, Third Party Advisory
• https://www.kb.cert.org/vuls/id/507496Third Party Advisory, US Government Resource

Published

Jul 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3191D-Link DIR-130 firmware version 1.23 and DIR-330 firmware ve…
• CVE-2017-3192D-Link DIR-130 firmware version 1.23 and DIR-330 firmware ve…
• CVE-2017-3193Multiple D-Link devices including the DIR-850L firmware vers…8.8
• CVE-2017-3194Pandora iOS app prior to version 8.3.2 fails to properly val…
• CVE-2017-3195Commvault Edge Communication Service (cvd) prior to version …9.8
• CVE-2017-3196PCAUSA Rawether framework does not properly validate BPF dat…
• CVE-2017-3198GIGABYTE BRIX UEFI firmware does not cryptographically valid…
• CVE-2017-3199The Java implementation of GraniteDS, version 3.1.1.GA, AMF3…8.1
• CVE-2017-3200The Java implementation of AMF3 deserializers used in Granit…8.1
• CVE-2017-3201The Java implementation of AMF3 deserializers used in Flamin…
• CVE-2017-3202The Java implementation of AMF3 deserializers used in Flamin…
• CVE-2017-3203The Java implementations of AMF3 deserializers in Pivotal/Sp…