Unuathorized access is possible through Integrated Lights Out firmaware if server is powered off but power cord is unplugged.
vulners.com/securityvulns/securityvulns:doc:9447