From what I understand this gives the attacker administrative access via a routers Web UI configuration interface. So they could change the configuration of the

From what I understand this gives the attacker administrative access via a routers Web UI configuration interface. So they could change the configuration of the router, which could be concerning in some scenarios but irrelevant most others. Assuming it is something like this, you can help protect yourself by disabling remote Web UI management. This is the default already for most routers. Though I guess we will know when Lior Oppenheim presents the issue at the 31C3 in a week or so.