Gigabytes the Dust with UEFI Vulnerabilities

Stefan Mileschin · 7th April 2017, 05:47

At this year’s BlackHat Asia security conference, researchers from Cylance disclosed two potentially fatal flaws in the UEFI firmware of Gigabyte BRIX small computers which allow a would-be attacker unfettered low-level access to the computer.

Gigabyte has been working on a fix since the start of 2017. Gigabyte are preparing to release firmware updates as a matter of urgency to only one of the affected models — GB-BSi7H-6500 (firmware vF6), while leaving the — GB-BXi7-5775 (firmware vF2) unpatched as it has reached it’s end of life. We understand that support can’t last forever, but if you sell products with such a big fault from the factory, it might be worth it to fix the problem and keep your reputation.

http://hackaday.com/2017/04/04/gigab...lnerabilities/

7th April 2017, 05:47	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 153,541	Gigabytes the Dust with UEFI Vulnerabilities At this year’s BlackHat Asia security conference, researchers from Cylance disclosed two potentially fatal flaws in the UEFI firmware of Gigabyte BRIX small computers which allow a would-be attacker unfettered low-level access to the computer. Gigabyte has been working on a fix since the start of 2017. Gigabyte are preparing to release firmware updates as a matter of urgency to only one of the affected models — GB-BSi7H-6500 (firmware vF6), while leaving the — GB-BXi7-5775 (firmware vF2) unpatched as it has reached it’s end of life. We understand that support can’t last forever, but if you sell products with such a big fault from the factory, it might be worth it to fix the problem and keep your reputation. http://hackaday.com/2017/04/04/gigab...lnerabilities/

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
iOS 9.3.5 fixes serious zero-day vulnerabilities	Stefan Mileschin	WebNews	0	29th August 2016 07:03
Technology Lab / Information Technology Windows 10 shaves off gigabytes with selecti	jmke	WebNews	0	17th March 2015 09:19
OS X, iOS And Linux Have More Vulnerabilities Than Windows	Stefan Mileschin	WebNews	0	24th February 2015 06:57
How to Stop Your Mac’s Mail App From Wasting Gigabytes of Space	Stefan Mileschin	WebNews	0	20th February 2015 19:44
Apple Fixes Numerous Vulnerabilities	Stefan Mileschin	WebNews	0	24th September 2014 08:16
Understanding When The NSA Discloses Cyber Vulnerabilities	Stefan Mileschin	WebNews	0	1st May 2014 16:28
New Vulnerabilities Found in Latest Java Update	Stefan Mileschin	WebNews	0	3rd September 2012 13:26
UEFI Forum Releases UEFI 2.3.1 Specification Update	Stefan Mileschin	WebNews	0	4th July 2012 10:21
Gigabytes intro 3 new ATX Cases	jmke	WebNews	0	22nd January 2009 16:21
300 gigabytes in the size of a DVD?	jmke	WebNews	0	28th November 2005 23:30