If the firmware includes any software that is a member project of the Software Freedom Conservancy (here's a list), which it almost certainly does because 99% of these devices include BusyBox, send mail to conservancy@softwarefreedom.org and tell them about the device. They will start the process of making sure the vendor is complying with the necessary requirements of the licenses.