Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
https://exchange.xforce.ibmcloud.com/vulnerabilities/16919
http://www.securityfocus.com/bid/10881
http://www.idefense.com/application/poi/display?id=120&type=vulnerabilities&flashstatus=true