CVE-2017-3198

CVE-2017-3198: GIGABYTE BRIX UEFI firmware is not cryptographically signed

Vendor Gigabyte

Product GB-BSi7H-6500

Weakness CWE-345

Published July 9, 2018

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served over HTTP. An attacker can make arbitrary modifications to firmware images without being detected.

Key dates

02Disclosure timeline

July 9, 2018 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-3198 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/345.html

Related vulnerabilities

04Related CVE

CVE-2021-33712 CVE-2024-1321 EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Unauthenticated Booking Payment Bypass CVE-2026-3177 Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.9.7 - Insufficient Verification of Data Authenticity to Unauthenticated Donation Status Forgery via Stripe Webhook CVE-2021-39158 Dependency injection in NVCaffe CVE-2023-27982

Identifiers

CVE CVE-2017-3198

CWE CWE-345

Affected versions

Vendor Gigabyte

Product GB-BSi7H-6500

Affected F6

Vendor Gigabyte

Product GB-BXi7-5775

Affected F2