High · published December 22, 2018
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 78.5th percentile for exploit probability.
⚡ GIGABYTE drivers have a sneaky backdoor that lets attackers read and write to critical IO ports! 🛠️ Think of it like a sneaky maintenance worker who can access every room in a building without anyone knowing. This worker could change passwords, unlock doors, and even tamper with sensitive equipment! An attacker exploiting this vulnerability could run arbitrary code with elevated privileges, allowing them to take control of your system and manipulate data or settings as they please. This is absolutely devastating for security, as it opens the door to a complete system compromise!
Think of it like a sneaky maintenance worker who can access every room in a building without anyone knowing. This worker could change passwords, unlock doors, and even tamper with sensitive equipment! The GPCIDrv and GDrv low-level drivers in GIGABYTE software expose functionality that allows reading and writing to IO ports, which can be leveraged to execute code with higher privileges than intended.
An attacker exploiting this vulnerability could run arbitrary code with elevated privileges, allowing them to take control of your system and manipulate data or settings as they please. This is absolutely devastating for security, as it opens the door to a complete system compromise! Immediate action is crucial! Update GIGABYTE APP Center to version 1.05.21 or later, AORUS GRAPHICS ENGINE to version 1.57 or later, XTREME GAMING ENGINE to version 1.26 or later, and OC GURU II to version 2.08. Ensure your systems are patched and regularly review security settings to prevent unauthorized access. 🔒 You're already on the path to security hero status! Follow these steps to lock it down and keep your systems safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| gigabyte/aorus_graphics_engine | < 1.57 | 1.57 |
| gigabyte/app_center | ≤ 1.05.21 | — |
| gigabyte/oc_guru_ii | all versions | — |
| gigabyte/xtreme_gaming_engine | < 1.26 | 1.26 |