Technology2 sources
Critical Code-Execution Flaw in UEFI Firmware Affects Most Servers
- A critical code-execution vulnerability exists in UEFI firmware used by most server vendors and data centers.
- The flaw is located in the TianoCore EDK II, an open-source codebase utilized by hardware makers and cloud providers.
- The vulnerability has a severity rating of 9.5 out of 10, indicating a high risk.
- Global defenders are tasked with addressing this security issue promptly.
- The flaw threatens the boot-time firmware, impacting a large portion of the world's servers.