#cuibonobotantek: the vulnerability is pretty extensive. for example, routers don't normally sanitize DHCP messages when they're assigning an IP address to you, so you could potentially run arbitrary code just in the process of getting an IP address from a router