Security researchers have demonstrated how it might be possible to place backdoor rootkit software on a network card. Guillaume Delugr
He used publicly available documentations and open source tools to develop a firmware debugger. He also reverse-engineered the format of the EEPROM where firmware code is stored, as well as the bootstrap process of the device.

The link for this article located at The Register UK is no longer available.