Researchers have disclosed new firmware vulnerabilities that can be exploited by hackers to gain long-time access to any of the millions of affected devices.