LogoFAIL
Discovered | 2023 |
---|---|
LogoFAIL is a vulnerability in UEFI.
Context
Discovery
LogoFAIL was discovered by Binarly Inc in late 2023.
Scope
LogoFAIL affects almost all UEFI based systems, and thus most PCs built since 2011. It does not affect older BIOS based systems. LogoFAIL vulnerabilities can cause a system to be compromised in a way that is very hard - if not impossible - to detect.
Security Response
This cannot be fully addressed in software. The only real fix is a firmware update.
Vulnerability Table
The Fixed Firmware indicates the first version of firmware with a fix included. You should run that, or any later version. Seda recommends the latest firmware for your board.
Mainboard | Status | Latest Firmware | Fixed Firmware | Link | Notes |
---|---|---|---|---|---|
LEGACY | |||||
A8R-MVP | Not Vulnerable | 0605 | N/A | "Firmware Updates". | Not affected; legacy BIOS system. |
900 SERIES | |||||
F2A85-M | Vulnerable | 6508 | "Firmware Updates". | No patch is expected for this board. | |
970 PRO GAMING/AURA | Vulnerable | 1001 | "Firmware Updates". | No patch is expected for this board. | |
TUF SABERTOOTH 990FX | Vulnerable | 1604 | "Firmware Updates". | No patch is expected for this board. | |
TUF SABERTOOTH 990FX R2.0 | Vulnerable | 2901 | "Firmware Updates". | No patch is expected for this board. | |
TUF SABERTOOTH 990FX R3.0 | Vulnerable | 0216 | "Firmware Updates". | No patch is expected for this board. | |
ROG CROSSHAIR V FORMULA-Z | Vulnerable | 2201 | "Firmware Updates". | No patch is expected for this board. | |
300 SERIES | |||||
PRIME A320M-E | Patched | 6211 | 6211 | "Firmware Updates". | Fixed by ASUS. |
PRIME X399-A | Vulnerable | 1601 | "Firmware Updates". | ||
ROG STRIX X399-E GAMING | Vulnerable | 1601 | "Firmware Updates". | ||
ROG ZENITH EXTREME ALPHA | Vulnerable | 2601 | "Firmware Updates". | ||
400 SERIES | |||||
TUF B450M-PLUS GAMING | Vulnerable | 4401 | "Firmware Updates". | ||
TUF X470-PLUS GAMING | Vulnerable | 6210 | "Firmware Updates". | ||
500 SERIES | |||||
TUF GAMING A520M-PLUS | Vulnerable | 3402 | "Firmware Updates". | ||
TUF GAMING A520M-PLUS WIFI | Patched | 3405 | 3405 | "Firmware Updates". | Fixed by ASUS. |
TUF GAMING B550M-PLUS WIFI II | Patched | 3405 | 3405 | "Firmware Updates". | Fixed by ASUS. |
ROG STRIX X570-E GAMING WIFI II | Vulnerable | 5003 | "Firmware Updates". | ||
NOTEBOOK/LAPTOP | |||||
TUF GAMING FX705DY | Unknown | 315 | "Firmware Updates". |