PXE (Preboot Execution Environment) boot lets a computer obtain boot files from a network before its local operating system starts. Firmware initializes the network interface, contacts a boot server, and loads a network-provided image. Organizations commonly use PXE to provision or recover machines without installing boot media on each device.
Because PXE runs before Windows or Linux, flaws in firmware’s network-boot code can expose systems outside the operating system’s usual security controls. Attackers may target bugs in how that code handles network traffic, while defenders should inventory firmware, install vendor fixes, and restrict access to provisioning networks. If network boot is not needed, disabling it can reduce exposure.