The vulnerability is already being used by malicious users, according to the manufacturer. Anyone using the affected appliance should patch it.