Critical severity9.8NVD Advisory· Published Jul 9, 2018· Updated Jun 17, 2026
CVE-2017-3198
CVE-2017-3198
Description
GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served over HTTP. An attacker can make arbitrary modifications to firmware images without being detected.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- cpe:2.3:o:gigabyte:gb-bsi7h-6500_firmware:f6:*:*:*:*:*:*:*
- cpe:2.3:o:gigabyte:gb-bxi7-5775_firmware:f2:*:*:*:*:*:*:*
- GIGABYTE/GB-BSi7H-6500v5Range: F6
- GIGABYTE/GB-BXi7-5775v5Range: F2
Patches
Vulnerability mechanics
References
3- www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.htmlnvdExploitThird Party Advisory
- www.securityfocus.com/bid/97294nvdThird Party AdvisoryVDB Entry
- www.kb.cert.org/vuls/id/507496nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.