The two flaws allow man-in-the-middle attacks that would give an attacker access to all data flowing through the router.
Source: Threadpost