personally never found a reason why to include icmp in there for what i was building using edk2.

as others noted pxe is also already very fragile and enough network access to perform the icmp attack is likely enough access to mitm the entire pxe run and slap in your own boot image or modules etc.

i dont think most servers boot using PXE so that is grossly overstated? or would it include the attacker going into the boot menu and selecting to pxe boot... because why use an exploit then if you can just point it to your own server and again pull the image like that.

all u need is a konboot or similar tool inserted to then subsequently load the original image -_-

Instead, it applies only to organizations with machines that boot from local networks, or conceivably from Internet-connected resources.

Who is PXE-booting over the open Internet!?