{"id":184024,"date":"2026-10-28T23:40:36","date_gmt":"2026-10-28T21:40:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/udalyonnaya-uyazvimost-v-servernyh-uefi-proshivkah-ekspluatiruemaya-cherez-otpravku-icmp-paketa"},"modified":"2026-10-28T23:40:41","modified_gmt":"2026-10-28T21:40:41","slug":"remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","title":{"rendered":"Vulnerabilitate la distan\u021b\u0103 \u00een firmware-urile UEFI de server, exploatat\u0103 prin trimiterea unui pachet ICMP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen TianoCore EDK II (EFI Development Kit II), o implementare de referin\u021b\u0103 open-source a UEFI folosit\u0103 \u00een majoritatea pl\u0103cilor de baz\u0103 pentru servere, a fost remediat\u0103 o vulnerabilitate critic\u0103 (CVE-2026-97631). Vulnerabilitatea se afl\u0103 \u00een driver-ul PXE \u0219i poate fi exploatat\u0103 prin trimiterea de pachete ICMP special configurate \u00een timpul boot-ului de re\u021bea \u00een re\u021bele IPv4 sau IPv6. Atacul nu necesit\u0103 autentificare \u0219i permite atacatorului s\u0103 execute cod cu privilegii UEFI firmware \u00eenainte de a preda controlul sistemului de operare, ceea ce poate fi folosit pentru a ocoli mecanismul de verificare a boot-ului UEFI Secure Boot \u0219i a introduce componente mali\u021bioase \u00een etapa de boot.<\/p>\n

Problema este cauzat\u0103 de o dep\u0103\u0219ire a buffer-ului \u00een handler-ul de mesaje ICMP din driver-ul UefiPxeBcDxe, care este utilizat pentru boot-ul PXE \u0219i accept\u0103 pachete ICMP \u00een timpul boot-ului de re\u021bea pentru a \u00eenregistra erorile de re\u021bea. Dep\u0103\u0219irea apare din cauza plas\u0103rii mesajelor de eroare primite \u00eentr-un buffer fix de 504 octe\u021bi, f\u0103r\u0103 a verifica dimensiunea real\u0103 a datelor primite. \u00cen cazul \u00een care se trimit mai mult de 504 octe\u021bi \u00eentr-un pachet ICMP, cap\u0103tul care nu \u00eencap \u00een buffer este scris dincolo de acest buffer, afect\u00e2nd structurile care urmeaz\u0103. <\/p>\n

Atacul poate fi efectuat din re\u021beaua global\u0103 \u2014 este suficient s\u0103 cuno\u0219ti adresa IP a victimei \u0219i s\u0103 po\u021bi determina momentul \u00eenc\u0103rc\u0103rii PXE. \u0218tiind ce firmware este utilizat pe server<\/a> victim\u0103 permite atacatorului s\u0103 preg\u0103teasc\u0103 un exploit av\u00e2nd \u00een vedere plasarea structurilor \u00een memoria unei anumite versiuni a firmware-ului \u0219i s\u0103 exploateze vulnerabilitatea pentru a executa cod la nivelul DXE (Driver Execution Environment), care se desf\u0103\u0219oar\u0103 \u00een inelul 0 de protec\u021bie. <\/p>\n

Proiectul EDK II a fost deschis \u00een 2004 de c\u0103tre Intel \u0219i este folosit de to\u021bi marii produc\u0103tori de firmware pentru sisteme de servere, centre de date \u0219i furnizori de cloud. Printre altele, este utilizat \u00een firmware-urile AMI, Insyde \u0219i Phoenix. Vulnerabilit\u0103\u021bile se reg\u0103sesc \u0219i \u00een firmware-urile bazate pe platforma Mu de la Microsoft, care este un fork al EDK II.<\/p>\n

Problema a fost identificat\u0103 de c\u0103tre reprezentan\u021bii companiilor Anthropic \u0219i Google \u0219i a fost planificat\u0103 pentru o dezv\u0103luire public\u0103 coordonat\u0103 \u00een ianuarie 2027. \u00cens\u0103 informa\u021biile au fost publicate mai devreme, deoarece un inginer de la AMI a \u00eenc\u0103lcat accidental embargoul \u0219i a publicat un pull request public cu o corectare, pe baza c\u0103ruia se putea \u00een\u021belege esen\u021ba vulnerabilit\u0103\u021bii.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 TianoCore EDK II (EFI Development Kit II), \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 UEFI, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-97631). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 PXE \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 ICMP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432 \u0441\u0435\u0442\u044f\u0445 IPv4 \u0438\u043b\u0438 IPv6. \u0410\u0442\u0430\u043a\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184024","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate la distan\u021b\u0103 \u00een firmware-urile UEFI pentru servere, exploatat\u0103 prin trimiterea unui pachet ICMP | ProHoster","description":"\u00cen TianoCore EDK II (EFI Development Kit II), implementarea de referin\u021b\u0103 deschis\u0103 UEFI, utilizat\u0103 \u00een majoritatea pl\u0103cilor de baz\u0103 pentru servere, a fost remediat\u0103 o vulnerabilitate critic\u0103 (CVE-2026-97631).","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 ICMP-\u043f\u0430\u043a\u0435\u0442\u0430 | ProHoster","og:description":"\u0412 TianoCore EDK II (EFI Development Kit II), \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 UEFI, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-97631).","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-28T21:40:36+00:00","article:modified_time":"2026-10-28T21:40:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184024","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=184024"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184024\/revisions"}],"predecessor-version":[{"id":184025,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184024\/revisions\/184025"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=184024"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=184024"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=184024"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}