LogoFAIL: Difference between revisions

From Seda's Enhancements
Jump to navigation Jump to search
Line 141: Line 141:
| 4401
| 4401
|  
|  
| {{cite web |title=Firmware Updates |url=https:https://www.asus.com/id/supportonly/tuf%20gaming%20b450m-pro%20ii/helpdesk_bios/}}
| {{cite web |title=Firmware Updates |url=https://www.asus.com/id/supportonly/tuf%20gaming%20b450m-pro%20ii/helpdesk_bios/}}
| Not fixed
| Not fixed
|-
|-

Revision as of 05:36, 2 March 2024

LogoFAIL logo by Binarly, Inc.
Discovered2023


LogoFAIL is a vulnerability in UEFI.

Context

Discovery

LogoFAIL was discovered by Binarly Inc in late 2023.

Scope

LogoFAIL affects almost all UEFI based systems, and thus most PCs built since 2011. It does not affect older BIOS based systems. LogoFAIL vulnerabilities can cause a system to be compromised in a way that is very hard - if not impossible - to detect.

Security Response

This cannot be fully addressed in software. The only real fix is a firmware update.

Vulnerability Table

The Vulnerable firmware is the last version of the firmware which was vulnerable. The Safe firmware is the first version that was patched - you should run that, or any later version. Seda recommends the latest firmware for your board.

Seda's Enhancements Supported Devices - Vulnerability to LogoFAIL
Mainboard Status Vulnerable Safe Link Notes
LEGACY
A8R-MVP Not Vulnerable N/A 0605 "Firmware Updates". Not affected; legacy BIOS system.
K8N-E Deluxe Not Vulnerable N/A 1012.007 "Firmware Updates". Not affected; legacy BIOS system.
KGPE-D16 Not Vulnerable N/A 3309 "Firmware Updates". Not affected; legacy BIOS system.
900 SERIES
F2A85-M Vulnerable 6508 "Firmware Updates". No patch is expected for this board.
970 PRO GAMING/AURA Vulnerable 1001 "Firmware Updates". No patch is expected for this board.
TUF SABERTOOTH 990FX Vulnerable 1604 "Firmware Updates". No patch is expected for this board.
TUF SABERTOOTH 990FX R2.0 Vulnerable 2901 "Firmware Updates". No patch is expected for this board.
TUF SABERTOOTH 990FX R3.0 Vulnerable 0216 "Firmware Updates". No patch is expected for this board.
ROG CROSSHAIR V FORMULA-Z Vulnerable 2201 "Firmware Updates". No patch is expected for this board.
300 SERIES
PRIME A320M-E Patched 6210 6211 "Firmware Updates". Fixed by ASUS.
PRIME X399-A Patched 1601 1602 "Firmware Updates". Fixed by ASUS
ROG STRIX X399-E GAMING Patched 1601 1602 "Firmware Updates". Fixed by ASUS.
ROG ZENITH EXTREME ALPHA Patched 2601 2701 "Firmware Updates". Fixed by ASUS.
400 SERIES
TUF B450M-PLUS GAMING Patched 4401 4404 "Firmware Updates". Fixed by ASUS.
TUF GAMING B450M-PRO II Vulnerable 4401 "Firmware Updates". Not fixed
TUF X470-PLUS GAMING Patched 6210 6213 "Firmware Updates". Fixed by ASUS.
500 SERIES
TUF GAMING A520M-PLUS Patched 3402 3407 "Firmware Updates". Fixed by ASUS.
TUF GAMING A520M-PLUS WIFI Patched 3403 3405 "Firmware Updates". Fixed by ASUS.
TUF GAMING B550M-PLUS WIFI II Patched 3404 3405 "Firmware Updates". Fixed by ASUS.
ROG STRIX X570-E GAMING WIFI II Patched 5003 5004 "Firmware Updates". Fixed by ASUS.
NOTEBOOK/LAPTOP
TUF GAMING FX705DY Not Vulnerable N/A 315 "Firmware Updates". ASUS reports this device is not affected.
ZENBOOK UX390UAK Not Vulnerable N/A 320 "Firmware Updates". ASUS reports this device is not affected.