Researchers flag common misconfiguration errors and a template injection technique that could let an attacker take over the IT management network and connected systems.