Comment by qwertyforce

Maybe intercept firmware update and then reverse engineer it and find rce?