Here's Exodus's write-up on the vulnerability and exploit: <a href="https://blog.exodusintel.com/2016/01/26/firewall-hacking/" rel="nofollow">https://blog.exodusintel.com/2016/01/26/firewall-hacking/</a>