However, due to implementation flaws in Gigabyte’s firmware, attackers who gain elevated privileges – whether through local access or a remote exploit – could compromise SMM and ultimately gain full control of the system.

So you first need to get access via different security issues. For second I thought this firmware bug somehow allowed remote access.