A German security researcher discovered how to retrieve the admin credentials from a TP-Link M5350 3G/Wi-Fi modem with an evil text message. The devices admin credentials can be retrieved by an attacker with a simple text message, the router replies with admin username, admin password, its SSID, and its login password. The bug was discovered by the security researcher Jan Hrsch from the German firm Securai. He analyzed the firmware running on several smart objects and discovered multiple bugs easy to exploit.”]
Source: http://securityaffairs.co/wordpress/57902/hacking/tp-link-m5350-bug.html