Critical flaw discovered in dd-wrt

MagicM writes: A critical flaw has been discovered in DD-WRT, a Linux based alternative OpenSource firmware for WLAN routers such as the fan-favorite Linksys WRT54GL. The flaw can give an attacker instant root access to the router merely by embedding an image with a specially crafted URL in a webpage (CSRF attack).