http://www.computerworld.com/article/3151097/security/updates-and-more-on-the-netgear-router-vulnerability.html

Basicly any device on the local network (or malicious webpage loaded by any such device) can run shell commands on the router. There's a fix out for some of the routers. More info on Netgear's site here.