Harddrive firmwares have been reverse-engineered, often are ARM-based and flashable. In principle it can be used for similar payload delivery as lo-jack.

Any PCIe device that has flashable firmware could also be used to perform DMA attacks on systems that don't use the IOMMU for memory isolation.