Reply to post:

It would be a vulnerability if you can do it without logging into the admin interface, or if all the routers ship with the same default password of "changeme".

That'd be rather stupid though.

I wonder whether they did both?