vulnerability
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
HighCVSS 9.5
Summary
A 16-year-old vulnerability in EDK II, the code used to build UEFI firmware, allows an attacker to run code before the operating system loads during network booting. While a fix exists, it hasn't been integrated into stable releases yet, leaving many systems vulnerable until firmware updates are deployed. The vulnerability is particularly relevant for organizations relying on network booting for servers and data center equipment.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data