I'm upgrading my home lab, and one of the things I'm planning on introducing this time is out-of-band management through a Raspberry Pi console server similar to this: https://www.packet6.com/configuring-your-raspberry-pi-as-a-console-server/
I've read a lot about the vulnerability of console servers in ICS environments where they can provide a path from internet to real-world devices. What I'm interested in is the other way around. Assuming a box in my management band is connected to an infected host in my DMZ, what if anything can that host do?