zlacker

>>zdw+(OP)
"If a potential attacker already has administrative access to the BMC..."

Then you've already lost.

The BMC needs to be ideally on a physically isolated network, or at least a separate one that has no route from the outside nor on the machine itself.

>>SoftTa+K5b
This means that any sysadmin could plant a backdoor for later use.

>>UltraS+oKb
and/or someone "renting" a bare metal server from such a provider too.