Well unless you’re a moron and your pxe booting devices are accessible from the outside directly, which would be insane, it seems this is a very limited and specific attack surface.