EFI IPv6/PXE Security Flaw

ArsTechnica has reported a series of flaws in the IPv6 implementation of the
UEFI PXE process. When exploited, these flaws enable malicious code to be
installed on systems outside the visibility of the to-be-loaded operating
system.

While the flaw(s) are reported to relate to IPv6, they underscore the need
to properly secure mission-critical network infrastructure. Console LAN
ports and resources relied on by console processors should be in a separate,
isolated security zone, with appropriate monitoring.

The ArsTechnica article, including …

code console critical enable exploited flaw flaws implementation infrastructure ipv6 malicious mission network network infrastructure operating system process security security flaw series system systems uefi visibility