Assuming you could exploit the browser&#x27;s JS to submit such a request (I thought I remembered seeing a security feature of modern browsers to prevent this?) and assuming the web interface requires no authentication, you would only be able to enable WAN HTTP access. The telnet and ssh still appear to be LAN-only. And you still need the serial number to generate a password (does the web interface even show that?). I don&#x27;t see a viable drive-by attack vector other than malware.<p><i>edit</i> It does look like telnet can be accessed via WAN, which is pretty bad.