The critical flaw in UEFI firmware—used by most server vendors and data centers—allows attackers to execute code early in the boot process.