I have an HP Proliant server. I have been using it for several years. Sometimes I used its iLO web interface via WAN (I have forwared required ports) completely ignoring all warnings from my browser about the server certificate being invalid. Recently I have learned many information about SSL/TLS and MITM attacks. Now I am VERY concerned about security issues. What if a bad guy in the middle learned my iLO credentials? What if he has already installed an undetectable malware? What if he modified iLO firmware so his activity is not displayed in iLO event log? What if he hacked the firmware so erasing and resetting everything won't help?
What should I do? Should I fear anything I have listed here? Should I change iLO password? Should I reset hard drives (currently there is no any valuable information stored on the server, so I can do it if it needed)? Should I do a Secure Erase? Should I reset iLO to factory defaults?