{"id":184024,"date":"2026-10-28T23:40:36","date_gmt":"2026-10-28T21:40:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/udalyonnaya-uyazvimost-v-servernyh-uefi-proshivkah-ekspluatiruemaya-cherez-otpravku-icmp-paketa"},"modified":"2026-10-28T23:40:41","modified_gmt":"2026-10-28T21:40:41","slug":"remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","title":{"rendered":"Kaugjuhtimise haavatavus serverite UEFI-firmware'is, mida \u00e4rakasutatakse ICMP-paketi saatmise kaudu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

TianoCore EDK II-s (EFI Development Kit II) avatud standardlahenduses UEFI, mida kasutatakse enamikus serveri emaplaatides, on leitud kriitiline haavatavus (CVE-2026-97631). Haavatavus esineb PXE draiveris ja seda saab kuritarvitada, saates spetsiaalselt vormistatud ICMP-pakette v\u00f5rgu k\u00e4ivitamise ajal IPv4 v\u00f5i IPv6 v\u00f5rkudes. R\u00fcnnak ei n\u00f5ua autentimist ja v\u00f5imaldab r\u00fcndajal k\u00e4ivitada oma koodi UEFI-firmware'i privileegidega enne operatsioonis\u00fcsteemile kontrollimise andmist, mis v\u00f5ib olla kasutatud UEFI Secure Boot'i kinnitatud laadimise mehhanismi \u00fcmberminekuks ja pahatahtlike komponentide lisamiseks laadimisprotsessi ajal.<\/p>\n

Probleem on p\u00f5hjustatud puhver \u00fcletamisest ICMP-s\u00f5numite t\u00f6\u00f6tleja UefiPxeBcDxe, mis on kasutusel PXE laadimisel ja v\u00f5tab vastu ICMP-pakette v\u00f5rgu k\u00e4ivitamise ajal, et fikseerida v\u00f5rguvigade. \u00dcletamine toimub, kuna saadetavad vigade teated paigutatakse fikseeritud 504 baitise puhveri, ilma et kontrollitaks tegelikku saadetud andmete suurust. Kui ICMP-paketis saadetakse rohkem kui 504 baiti, kirjutatakse puhverist v\u00e4ljapoole ulatuv osa j\u00e4rgmiste struktuuride peale. <\/p>\n

\u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0438\u0437 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 — \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u043d\u0430\u0442\u044c IP-\u0430\u0434\u0440\u0435\u0441 \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u0441\u0443\u043c\u0435\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043c\u043e\u043c\u0435\u043d\u0442 PXE-\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438. \u0417\u043d\u0430\u044f \u043a\u0430\u043a\u0430\u044f \u0438\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0430 serveris<\/a> ohvril, saab r\u00fcndaja ette valmistada eksploiidi, arvestades struktuuride paiknemist konkreetse firmware'i kogumi m\u00e4lus, ja kuritarvitada haavatavust koodi t\u00e4itmiseks DXE (Driver Execution Environment) tasemel, mis t\u00f6\u00f6tab nullringis. <\/p>\n

EDK II projekt asutati 2004. aastal ettev\u00f5tte Intel poolt ja seda kasutavad k\u00f5ik suured firmware tootjad serverite, andmekeskuste ja pilveteenuste jaoks. Muuhulgas kasutatakse seda AMI, Insyde ja Phoenix firmware'ides. Haavatavused esinevad ka Microsofti Mu platvormi p\u00f5hjal valmistatud firmware'ides, mis on EDK II hargne.<\/p>\n

Probleem on tuvastatud Anthropic ja Google'i esindajate poolt ning selle avalikustamine oli planeeritud koordineeritud viisil 2027. aasta jaanuaris. Kuid teave pidi olema avalikustatud varem, kuna AMI insener rikkus juhuslikult keeldu ja avaldas avaliku pull-p\u00e4ringu parandusega, mille p\u00f5hjal sai aru haavatavuse olemusest.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 TianoCore EDK II (EFI Development Kit II), \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 UEFI, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-97631). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 PXE \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 ICMP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432 \u0441\u0435\u0442\u044f\u0445 IPv4 \u0438\u043b\u0438 IPv6. \u0410\u0442\u0430\u043a\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184024","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kaug-haavatavus serveri UEFI-p\u00e4evade jaoks, mida kasutatakse ICMP-pakettide saatmise kaudu | ProHoster","description":"TianoCore EDK II-s (EFI Development Kit II), avatud viidena UEFI-le, mida kasutatakse enamiku serveri emaplaatide puhul, on k\u00f5rvaldatud kriitiline haavatavus (CVE-2026-97631).","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 ICMP-\u043f\u0430\u043a\u0435\u0442\u0430 | ProHoster","og:description":"\u0412 TianoCore EDK II (EFI Development Kit II), \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 UEFI, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-97631).","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-28T21:40:36+00:00","article:modified_time":"2026-10-28T21:40:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/184024","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=184024"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/184024\/revisions"}],"predecessor-version":[{"id":184025,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/184024\/revisions\/184025"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=184024"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=184024"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=184024"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}