GIGABYTE confirms UEFI password bypass possible, calls it a design issue

Microsoft Windows Recovery Environment could allow attackers to bypass administrator-configured UEFI or BIOS passwords on GIGABYTE MBs.