Flaw in DSL routers could give attackers full, unauthenticated administrative access, researcher says.