I worked with Bruce Schneier on this piece. The situation in home routers and similar devices (between you and the rest of the Internet) is a danger beginning to unfold before us. This is a generic problem found in embedded systems, but it's particularly a problem for devices on the path between you an the rest of the Internet, as a problem can't be fixed by simply unplugging the offending device (if you can even detect the problem). The problem goes beyond your home router and includes similar devices such as your cable modems.
"Friends don't let friends run home router factory firmware."
Install OpenWrt or CeroWrt today if you are capable, and help reduce your vulnerability. And you can suffer less from bufferbloat, as an added bonus.
We must demand open code, and an update stream to go with any device we buy, as we go forward into the "brave new world" that some call the "Internet of Things". Binary blobs of any sort (particularly unmaintained blobs, which most are) are a long term danger. Make your purchasing choices wisely, educate your family and friends of the problem, and if you are an open source developer, come help out. The network you save and protect may be your own....