An interesting post on Bugtraq this week: apparently the Linksys WRT54G home router allows for anonymous FTP. And, using that anonymous FTP connection, a file can be accessed that contains the authentication credentials for the rest of the router’s functionality.
This doesn’t look too difficult to weaponize.