Huawei's routers of vulnerability
"Hacking [redacted] Routers" was the title of a lecture at Defcon by security expert Felix Lindner (also known as FX) and Gregor Kopf of the Berlin-based Recurity Labs. The "censored" routers were quickly established as being the AR18 and AR28 routers from the Chinese manufacturer Huawei. The two hackers have been looking at the firmware, default settings, and overall security of the routers and have concluded that just about everything you can do wrong, Huawei has done wrong.
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump