There are considerable attack vectors opened up here... a quick glance at the front page shows: > Change default DNS server > Conduct remote man-in-the-middle

There are considerable attack vectors opened up here... a quick glance at the front page shows: > Change default DNS server > Conduct remote man-in-the-middle attacks > Hot-swap code or even the entire firmware > Upload, flash, and upgrade firmware silently > Disable ISP firmware upgrade > Change every config file and settings > Get and Set SNMP OID values > Change all associated MAC Addresses > Change serial numbers > Be exploited in botnet A simple change in DNS servers combined with man-in-the-middle attacks is enough to fool many people into entering CC details into rogue sites for example. (Edit for typos!)