Neat. So are legacy BIOS actually more secure at the moment? Weird to think about but very reminiscent of that one time almost every Gigabyte™ brand mobo had an exploit tied to its online update capability.
There’s probably flaws that would allow executing attacker supplied code, but it’s not like BIOSs had any notion of security (i.e. secure boot) to begin with, so you could just straight up have the system boot into your own image anyway.
Neat. So are legacy BIOS actually more secure at the moment? Weird to think about but very reminiscent of that one time almost every Gigabyte™ brand mobo had an exploit tied to its online update capability.
Yes, actual BIOSes have no network access. They had other issues though, like enough space to embed hidden persistent malware, writable from Windows.
Nah, PXE predates UEFI by like 20 years, it’s been a pretty normal feature since the late 80s.
iirc you cannot modify a bios in a pxe context, but I might be mistaken.
There’s probably flaws that would allow executing attacker supplied code, but it’s not like BIOSs had any notion of security (i.e. secure boot) to begin with, so you could just straight up have the system boot into your own image anyway.
Only from this specific exploit