Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service.