Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
A critical 16-year-old EDK II flaw allows crafted ICMP messages to crash PXE boots or enable pre-boot code execution on specific firmware builds.
More info