CVE-2017-3197— GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection

EPSS 2.84% · P86 Updated Feb 21, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2017-3197

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection

Source: NVD (National Vulnerability Database)

Vulnerability Description

GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

保护机制失效

Source: NVD (National Vulnerability Database)

Vulnerability Title

技嘉GB-BXi7-5775 BRIX UEFI和GB-BSi7H-6500 BRIX UEFI 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

GIGABYTE GB-BXi7-5775 BRIX UEFI和GB-BSi7H-6500 BRIX UEFI都是中国技嘉科技（GIGABYTE Technology）公司的电脑主机设备。技嘉GB-BXi7-5775 BRIX UEFI F2版本和GB-BXi7-5775 BRIX UEFI F2版本存在安全漏洞，该漏洞源于固件没有以安全的方式实现BIOSWE，BLE，SMM_BWP，和PRx功能。攻击者可利用该漏洞对BIOS执行写入操作并修改SPI flash。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
GIGABYTE	GB-BSi7H-6500	F6	-
GIGABYTE	GB-BXi7-5775	F2	-

II. Public POCs for CVE-2017-3197

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2017-3197

Please Login to view more intelligence information

https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-001.mdx_refsource_MISC
🔗 https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-002.mdx_refsource_MISC
🔗 https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.htmlx_refsource_MISC
http://www.securityfocus.com/bid/97294vdb-entryx_refsource_BID
🔗 https://www.kb.cert.org/vuls/id/507496third-party-advisoryx_refsource_CERT-VN
https://nvd.nist.gov/vuln/detail/CVE-2017-3197

IV. Related Vulnerabilities

Same product: GB-BSi7H-6500

CVE-2017-3198
GIGABYTE BRIX UEFI firmware is not cryptographically signed

Same vendor: GIGABYTE

Same weakness: CWE-693

V. Comments for CVE-2017-3197

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2017-3197— GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection

I. Basic Information for CVE-2017-3197

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2017-3197

III. Intelligence Information for CVE-2017-3197

IV. Related Vulnerabilities

V. Comments for CVE-2017-3197

Leave a comment