Slightly off topic, but I was surprised to find that my fios provided modem/router/AP gave me a root shell out of the box, and actiontec has the full toolchain to build for it published.

http://paste.click/QEYrXr (Note the uid/gid)