Medium sized routers owned by small service providers, private companies or even individuals tend to be more vulnerable.