Gigabyte

Critical security vulnerabilities in Gigabyte UEFI firmware allow attackers to execute arbitrary code in System Management Mode (SMM), bypassing Secure Boot and Intel BootGuard. These vulnerabilities enable persistent firmware-level malware undetectable by antivirus, affecting multiple systems through local/remote admin access during boot, sleep states, or normal operation. Users are advised to check for firmware updates and monitor vendor advisories.

Source: https://cybersecuritynews.com/gigabyte-uefi-firmware-vulnerability/

TPRM report: https://scoringcyber.rankiteo.com/company/gigabyte

"id": "gig820071525",
"linkid": "gigabyte",
"type": "Vulnerability",
"date": "7/2025",
"severity": "100",
"impact": "",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Technology',
                        'name': 'Gigabyte',
                        'type': 'Company'}],
 'attack_vector': ['local/remote admin access during boot',
                   'sleep states',
                   'normal operation'],
 'date_detected': 'July 11, 2025',
 'date_publicly_disclosed': 'July 11, 2025',
 'description': 'Critical security vulnerabilities have been discovered in '
                'Gigabyte UEFI firmware that could allow attackers to execute '
                'arbitrary code in System Management Mode (SMM), one of the '
                'most privileged execution environments in modern processors. '
                'The vulnerabilities, disclosed by the Software Engineering '
                'Institute’s CERT Coordination Center on July 11, 2025, affect '
                'multiple Gigabyte systems and could enable attackers to '
                'bypass fundamental security protections, including Secure '
                'Boot and Intel BootGuard.',
 'impact': {'systems_affected': 'Multiple Gigabyte systems'},
 'lessons_learned': 'Users should immediately check for firmware updates and '
                    'monitor vendor advisories, as these supply chain '
                    'vulnerabilities may affect other PC OEM vendors beyond '
                    'Gigabyte.',
 'post_incident_analysis': {'corrective_actions': 'Updated firmware to address '
                                                  'these vulnerabilities',
                            'root_causes': 'Improper validation in SMI (System '
                                           'Management Interrupt) handlers '
                                           'within Gigabyte’s UEFI firmware '
                                           'implementations'},
 'recommendations': 'Check Gigabyte support website and install latest UEFI '
                    'firmware updates immediately.',
 'references': [{'date_accessed': 'July 11, 2025',
                 'source': 'Software Engineering Institute’s CERT Coordination '
                           'Center'}],
 'response': {'communication_strategy': 'Gigabyte advises users to visit their '
                                        'support site to determine system '
                                        'impact and apply necessary updates',
              'remediation_measures': ['Install latest UEFI firmware updates'],
              'third_party_assistance': ['Binarly Research team',
                                         'CERT/CC',
                                         'Gigabyte’s PSIRT']},
 'title': 'Critical Vulnerabilities in Gigabyte UEFI Firmware',
 'type': 'Firmware Vulnerability',
 'vulnerability_exploited': ['CVE-2025-7029',
                             'CVE-2025-7028',
                             'CVE-2025-7027',
                             'CVE-2025-7026']}