The company has disclosed five severe vulnerabilities in some of their router models. The vulnerabilities include reflected Cross-Site Scripting (XSS) attacks, buffer overflows to means of obtaining admin credentials, bypassing authentication altogether, and executing arbitrary code. Some devices have reached their “end of life”” phase
Source: according to Shodan.io