Backdoor in Gigabyte UEFI firmware

1) Embedded malicious code (backdoor)

EUVDB-ID: #VU76737

Risk: Critical

CVSSv3.1: 9.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: N/A

CWE-ID: CWE-506 - Embedded Malicious Code

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain unauthorized access to the system.

The vulnerability exists due to presence of embedded malicious functionality (aka backdoor) in the UEFI firmware that was downloaded from the official website using the Gigabyte's App Center. This allows a remote attacker to gain full control over the system.

Note, the vulnerability is being actively exploited in the wild.

Mitigation

Install update from vendor's website.

Vulnerable software versions

A520M S2H rev 1.x: All versions

A620M GAMING X AX rev 1.0: All versions

A620M GAMING X rev 1.0: All versions

B360M DS3H rev 1.0: All versions

B365 HD3 rev 1.0: All versions

B365M DS3H rev 1.0: All versions

B450 AORUS Elite V2 rev 1.x: All versions

B450 AORUS M rev 1.x: All versions

B450 Gaming X rev 1.x: All versions

B450M AORUS ELITE rev 1.x: All versions

B450M DS3H rev 1.x: All versions

B450M DS3H V2 rev 1.x: All versions

B450M DS3H WIFI rev 1.x: All versions

B450M GAMING rev 1.x: All versions

B450M H rev 1.x: All versions

B450M K rev 1.0: All versions

B450M S2H rev 1.x: All versions

B460 AORUS PRO AC rev 1.0: All versions

B460 HD3 rev 1.0: All versions

B460M AORUS PRO rev 1.0: All versions

B460M D2V rev 1.0: All versions

B460M D3H rev 1.0: All versions

B460M DS3H AC rev 1.x: All versions

B460M DS3H rev 1.0: All versions

B460M GAMING HD rev 1.0: All versions

B460M POWER rev 1.0: All versions

B550 AORUS ELITE AX rev 1.0: All versions

B550 AORUS ELITE AX V2 rev 1.2: All versions

B550 AORUS ELITE AX V2 rev 1.2/1.3: All versions

B550 AORUS ELITE rev 1.0: All versions

B550 AORUS ELITE V2 rev 1.2: All versions

B550 GAMING X V2 rev 1.0/1.1/1.2: All versions

B550 GAMING X V2 rev 1.3: All versions

B550 GAMING X V2 rev 1.4: All versions

B550 Gaming X V2 rev 1.x: All versions

B550 UD AC rev 1.0 11: All versions

B550 UD AC rev 1.2: All versions

B550I AORUS PRO AX rev 1.0: All versions

B550I AORUS PRO AX rev 1.1: All versions

B550I AORUS PRO AX rev 1.2: All versions

B550M AORUS ELITE AX rev 1.3: All versions

B550M AORUS ELITE rev 1.0/1.1/1.2: All versions

B550M AORUS ELITE rev 1.3: All versions

B550M AORUS ELITE rev 1.x: All versions

B550M AORUS PRO AX rev 1.0: All versions

B550M AORUS PRO AX rev 1.1: All versions

B550M AORUS PRO P rev 1.0: All versions

B550M AORUS PRO P rev 1.1: All versions

B550M AORUS PRO P rev 1.2: All versions

B550M AORUS PRO rev 1.0: All versions

B550M DS3H AC rev 1.0/1.1/1.2/1.3: All versions

B550M DS3H AC rev 1.0/1.1/1.2/1.3/1.4: All versions

B550M DS3H AC rev 1.4: All versions

B550M DS3H AC rev 1.5 1.6: All versions

B550M DS3H AC rev 1.x: All versions

B550M DS3H rev 1.0/1.1/1.2/1.3: All versions

B550M DS3H rev 1.4: All versions

B550M DS3H rev 1.5: All versions

B550M DS3H rev 1.x: All versions

B550M GAMING rev 1.x: All versions

B550M K rev 1.0: All versions

B550M S2H rev 1.x: All versions

B560 AORUS PRO AX rev 1.0: All versions

B560 HD3 rev 1.x: All versions

B560I AORUS PRO AX rev 1.0: All versions

B560M AORUS ELITE rev 1.x: All versions

B560M AORUS PRO AX rev 1.x: All versions

B560M AORUS PRO rev 1.x: All versions

B560M D2V rev 1.x: All versions

B560M D3H rev 1.x: All versions

B560M DS3H AC rev 1.x: All versions

B560M DS3H PLUS rev 1.0: All versions

B560M DS3H V2 rev 1.0: All versions

B560M GAMING HD rev 1.x: All versions

B560M H rev 1.x: All versions

B560M H V2 rev 1.0: All versions

B560M POWER rev 1.x: All versions

B650 AERO G rev 1.0: All versions

B650 AORUS ELITE AX rev 1.x: All versions

B650 AORUS ELITE rev 1.0: All versions

B650 AORUS PRO AX rev 1.x: All versions

B650 GAMING X AX rev 1.0/1.1: All versions

B650 GAMING X AX rev 1.x: All versions

B650 GAMING X rev 1.0: All versions

B650 GAMING X rev 1.0 11: All versions

B650E AORUS MASTER rev 1.0: All versions

B650E AORUS TACHYON rev 1.0: All versions

B650I AORUS ULTRA rev 1.0: All versions

B650M AORUS ELITE AX rev 1.x: All versions

B650M AORUS ELITE rev 1.0: All versions

B650M AORUS PRO AX rev 1.x: All versions

B650M C rev 1.0: All versions

B650M DS3H rev 1.0: All versions

B650M GAMING X AX rev 1.x: All versions

B650M K rev 1.0: All versions

B660 AORUS ELITE AX DDR4 rev 1.0: All versions

B660 AORUS ELITE DDR4 rev 1.0: All versions

B660 AORUS MASTER DDR4 rev 1.0: All versions

B660 AORUS MASTER DDR4 rev 1.x: All versions

B660 AORUS MASTER rev 1.x: All versions

B660 DS3H AC DDR4 rev 1.0: All versions

B660 DS3H AC DDR4 rev 1.0/1.2: All versions

B660 DS3H AC DDR4 rev 1.1: All versions

B660 DS3H AC rev 1.0: All versions

B660 DS3H AX DDR4 rev 1.0: All versions

B660 DS3H AX DDR4 rev 1.0/1.1: All versions

B660 DS3H DDR4 rev 1.0: All versions

B660 DS3H DDR4 rev 1.0/1.1: All versions

B660 GAMING X AX DDR4 rev 1.0: All versions

B660 GAMING X DDR4 rev 1.0: All versions

B660 GAMING X rev 1.0: All versions

B660I AORUS PRO DDR4 rev 1.x: All versions

B660M AORUS ELITE AX DDR4 rev 1.0: All versions

B660M AORUS ELITE AX DDR4 rev 1.x: All versions

B660M AORUS ELITE DDR4 rev 1.0: All versions

B660M AORUS ELITE DDR4 rev 1.x: All versions

B660M AORUS PRO AX DDR4 rev 1.x: All versions

B660M AORUS PRO AX rev 1.x: All versions

B660M AORUS PRO DDR4 rev 1.0: All versions

B660M AORUS PRO rev 1.0: All versions

B660M D2H DDR4 rev 1.0: All versions

B660M D3H DDR4 rev 1.0: All versions

B660M DS3H AX DDR4 rev 1.x: All versions

B660M DS3H DDR4 rev 1.0: All versions

B660M GAMING AC DDR4 rev 1.0: All versions

B660M GAMING AC DDR4 rev 1.x: All versions

B660M GAMING AC rev 1.0: All versions

B660M GAMING DDR4 rev 1.0: All versions

B660M GAMING X AX DDR4 rev 1.x: All versions

B660M GAMING X AX rev 1.0: All versions

B660M GAMING X DDR4 rev 1.0: All versions

B660M GAMING X DDR4 rev 1.x: All versions

B660M GAMING X rev 1.0: All versions

B660M POWER DDR4 rev 1.0: All versions

B760M POWER rev 1.0: All versions

GA B560M D3P rev 1.0: All versions

H510M K rev 1.0: All versions

H510M K rev 1.1: All versions

H510M S2 rev 1.0/1.1/1.2: All versions

H510M S2 rev 1.3: All versions

H510M S2H rev 1.0: All versions

H510M S2H V2 rev 1.0: All versions

H510M S2H V2 rev 1.1: All versions

H510M S2H V2 rev 1.3: All versions

H510M S2P rev 1.0: All versions

H510M S2P rev 1.0 12: All versions

H610I DDR4 rev 1.0: All versions

H610M H DDR4 rev 1.0: All versions

H610M H DDR4 rev 1.1: All versions

H610M H DDR4 rev 1.1/1.3: All versions

H610M H DDR4 rev 1.2: All versions

H610M H rev 1.0: All versions

H610M H V2 DDR4 rev 1.0: All versions

H610M HD3P rev 1.0: All versions

H610M HD3P rev 20: All versions

H610M K DDR4 rev 1.0: All versions

H610M S2 DDR4 rev 1.0: All versions

H610M S2 DDR4 rev 1.1: All versions

H610M S2 DDR4 rev 1.1/1.3: All versions

H610M S2 DDR4 rev 1.2: All versions

H610M S2 rev 1.0: All versions

H610M S2 V2 DDR4 rev 1.0: All versions

H610M S2H DDR4 rev 1.0: All versions

H610M S2H DDR4 rev 1.1: All versions

H610M S2H DDR4 rev 1.1/1.3: All versions

H610M S2H DDR4 rev 1.2: All versions

H610M S2H rev 1.0: All versions

H610M S2H V2 DDR4 rev 1.0: All versions

N4120I H rev 1.0: All versions

N5105I H rev 1.0: All versions

Q670M D3H DDR4 rev 1.0: All versions

W480M VISION W rev 1.0: All versions

X570S AORUS ELITE AX rev 1.1: All versions

X570S AORUS ELITE rev 1.0: All versions

X570S AORUS MASTER rev 1.0: All versions

X570S AORUS PRO AX rev 1.0: All versions

X570S AORUS PRO AX rev 1.1: All versions

X570S GAMING X rev 1.0: All versions

X570S UD rev 1.0: All versions

X570SI AORUS PRO AX rev 1.0: All versions

X570SI AORUS PRO AX rev 1.1: All versions

X670 AORUS ELITE AX rev 1.0: All versions

X670 AORUS ELITE AX rev 1.1: All versions

X670 GAMING X AX rev 1.0: All versions

X670E AORUS MASTER rev 1.0: All versions

X670E AORUS XTREME rev 1.0: All versions

Z590 AORUS ELITE AX rev 1.0: All versions

Z590 AORUS ELITE rev 1.0: All versions

Z590 AORUS MASTER rev 1.0: All versions

Z590 AORUS PRO AX rev 1.0: All versions

Z590 AORUS TACHYON rev 1.0: All versions

Z590 AORUS ULTRA rev 1.0: All versions

Z590 D rev 1.0: All versions

Z590 GAMING X rev 1.x: All versions

Z590 UD AC rev 1.x: All versions

Z590 UD rev 1.0: All versions

Z590I AORUS ULTRA rev 1.0: All versions

Z690 AERO D rev 1.0: All versions

Z690 AERO D rev 1.x: All versions

Z690 AERO G DDR4 rev 1.0: All versions

Z690 AERO G DDR4 rev 1.x: All versions

Z690 AERO G rev 1.0: All versions

Z690 AERO G rev 1.x: All versions

Z690 AORUS ELITE AX DDR4 rev 1.0: All versions

Z690 AORUS ELITE AX DDR4 rev 1.x: All versions

Z690 AORUS ELITE AX DDR4 V2 rev 1.0: All versions

Z690 AORUS ELITE AX rev 1.0: All versions

Z690 AORUS ELITE AX rev 1.4: All versions

Z690 AORUS ELITE AX rev 1.x: All versions

Z690 AORUS ELITE DDR4 rev 1.0: All versions

Z690 AORUS ELITE DDR4 rev 1.x: All versions

Z690 AORUS ELITE DDR4 V2 rev 1.0: All versions

Z690 AORUS ELITE rev 1.0: All versions

Z690 AORUS ELITE STEALTH rev 1.0: All versions

Z690 AORUS MASTER rev 1.0: All versions

Z690 AORUS MASTER rev 1.x: All versions

Z690 AORUS PRO DDR4 rev 1.0: All versions

Z690 AORUS PRO DDR4 rev 1.x: All versions

Z690 AORUS PRO rev 1.0: All versions

Z690 AORUS PRO rev 1.x: All versions

Z690 AORUS TACHYON rev 1.0: All versions

Z690 AORUS ULTRA rev 1.0: All versions

Z690 AORUS ULTRA rev 1.x: All versions

Z690 AORUS XTREME rev 1.0: All versions

Z690 AORUS XTREME WATERFORCE rev 1.0: All versions

Z690 GAMING X DDR4 rev 1.0: All versions

Z690 GAMING X DDR4 rev 1.1: All versions

Z690 GAMING X DDR4 V2 rev 1.0: All versions

Z690 GAMING X rev 1.0: All versions

Z690 GAMING X rev 1.0/1.1: All versions

Z690 UD AC rev 1.0: All versions

Z690 UD AX DDR4 rev 1.0: All versions

Z690 UD AX DDR4 rev 1.x: All versions

Z690 UD AX DDR4 V2 rev 1.0: All versions

Z690 UD AX rev 1.0: All versions

Z690 UD AX rev 1.x: All versions

Z690 UD DDR4 rev 1.0: All versions

Z690 UD DDR4 rev 1.x: All versions

Z690 UD DDR4 V2 rev 1.0: All versions

Z690 UD rev 1.0: All versions

Z690 UD rev 1.x: All versions

Z690I AORUS ULTRA DDR4 rev 1.0: All versions

Z690I AORUS ULTRA LITE DDR4 rev 1.0: All versions

Z690I AORUS ULTRA LITE rev 1.0: All versions

Z690I AORUS ULTRA PLUS DDR4 rev 1.0: All versions

Z690I AORUS ULTRA PLUS rev 1.0: All versions

Z690I AORUS ULTRA rev 1.0: All versions

Z690M AORUS ELITE AX DDR4 rev 1.0: All versions

Z690M AORUS ELITE AX DDR4 rev 1.x: All versions

Z690M AORUS ELITE DDR4 rev 1.0: All versions

Z690M DS3H DDR4 rev 1.0: All versions

Z790 AERO G rev 1.0: All versions

Z790 AORUS ELITE AX DDR4 rev 1.0: All versions

Z790 AORUS ELITE AX rev 1.0: All versions

Z790 AORUS ELITE AX rev 1.1: All versions

Z790 AORUS ELITE DDR4 rev 1.0: All versions

Z790 AORUS ELITE rev 1.0: All versions

Z790 AORUS ELITE rev 1.1: All versions

Z790 AORUS MASTER rev 1.0: All versions

Z790 AORUS TACHYON rev 1.0: All versions

Z790 AORUS XTREME rev 1.0: All versions

Z790 D DDR4 rev 1.0: All versions

Z790 GAMING X AX rev 1.0: All versions

Z790 GAMING X AX rev 1.x: All versions

Z790 GAMING X rev 1.0: All versions

Z790 UD AC rev 1.0: All versions

Z790 UD AX rev 1.0: All versions

Z790 UD rev 1.0: All versions

Z790I AORUS ULTRA rev 1.0: All versions

Z790M AORUS ELITE AX rev 1.0: All versions

Z790M AORUS ELITE rev 1.0: All versions

UEFI firmware: All versions

External links

http://eclypsium.com/blog/supply-chain-risk-from-gigabyte-app-center-backdoor/
http://www.gigabyte.com/Press/News/2091

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

Yes. This vulnerability is being exploited in the wild.