The ROMs on NICs had huge attack surfaces, as each rom had to implement enough network stack from scratch. Not to mention how buggy they were. There's a very g

The ROMs on NICs had huge attack surfaces, as each rom had to implement enough network stack from scratch. Not to mention how buggy they were. There's a very good reason why iPXE is so often used for chainloading and why it has support for directly replacing the option rom of the card.