That depends, can the routers be accessed remotely over WAN?
If so an admin password might pop up in memory scans allowing a compromise. From there remote software can be downloaded to the router, potentially allowing snooping/mirroring of traffic.
But it's likely most of the them (ie the important ones) are behind local firewalls and VPNs.
And a lot of their WebEx, VoIP and VTC, which will be accessible either entirely within the organization, or on public networks.
Looks like most of their actual routers and stuff are not affected, which is unsurprising -- they SSH, not SSL, and it's unlikely they'd be running OpenSSL 1.0.1.
Exactly. Most affected products will be management interfaces for these devices. From my experience, enterprise type products direct you to put management ports on protected networks. IT people don't always follow this, but it's at least the recommendation.
If so an admin password might pop up in memory scans allowing a compromise. From there remote software can be downloaded to the router, potentially allowing snooping/mirroring of traffic.
But it's likely most of the them (ie the important ones) are behind local firewalls and VPNs.