CORE Advisory.

Looks like a nasty one..

Status: Vendor confirmed, firmware upgrades are available for some
products, others are still under development.

Severity: High (exploit code, server root compromise, significant
deployment, attacker must entice victim, mostly home user issue).