Some versions have been found to contain hardcoded credentials for Telnet and SSH, which can be exploited by unauthenticated attackers.
Downloading firmware from unofficial sources carries a high risk of malware or corrupt files.
If the router is unresponsive or acting strangely after an update, a factory reset can revert to a stable configuration.