Stefan Mileschin

Insecurity experts from cyber-security firm Cylance disclosed two vulnerabilities in the firmware of Gigabyte BRIX small computing devices.


The flaws allow an attacker to write malicious content to the UEFI firmware which makes it a doddle to install UEFI ransomware and prevent the BRIX devices from booting.
The Cylance researchers say the same flaws can be used to plant rootkits that allow attackers to persist malware for years. The two vulnerabilities discovered are CVE-2017-3197 and CVE-2017-3198.

http://fudzilla.com/news/43298-gigabyte-brix-has-flaws