Okay, just because I see people fearmongering about RCE in EDK2's NetworkPkg:
https://github.com/tianocore/edk2/security/advisories/GHSA-99cj-7hg9-mp4m
1. You are *not* affected if you're:
- Using coreboot with UefiPayloadPkg (EDK2)
- Not using PXE booting built into AMI/Insyde/Phoenix's firmware
- Using iPXE/netboot.xyz for netbooting
2. The only affected systems are servers that use EDK2 PXE module... which I've never seen used in production.
3. If you don't use PXE booting, simply disable the network stack in your firmware's setup menu.
4. It's not exploitable, unless an attacker already compromised another device on your local network. This would generate a lot of traffic, which would be quickly detected and flagged by vast majority of monitoring systems.
So much for "scary 9.5/10 CVE" :akko_shrug:
https://github.com/tianocore/edk2/security/advisories/GHSA-99cj-7hg9-mp4m
1. You are *not* affected if you're:
- Using coreboot with UefiPayloadPkg (EDK2)
- Not using PXE booting built into AMI/Insyde/Phoenix's firmware
- Using iPXE/netboot.xyz for netbooting
2. The only affected systems are servers that use EDK2 PXE module... which I've never seen used in production.
3. If you don't use PXE booting, simply disable the network stack in your firmware's setup menu.
4. It's not exploitable, unless an attacker already compromised another device on your local network. This would generate a lot of traffic, which would be quickly detected and flagged by vast majority of monitoring systems.
So much for "scary 9.5/10 CVE" :akko_shrug:
aens@transfem.social