Comment RCE Execution pathway (Score 1) 146
From TFA : "Because the driver doesn’t enforce a memory copy limit of 504 bytes, overwriting adjacent data, a malicious insider or a hacker who has gained low-level access to a local network can send an error message that appends code past this limit. The IUEFI module running on the CPU then becomes corrupted."
I am sure that "a malicious insider or a hacker who has gained low-level access to a local network" would have no other possibility from inside a data centre to cause any havoc.