[Pseudocyber]

launching such an attack may require access to a PC on the targeted network

In most situations, the attacker would need to be on a PC connected to the network to execute an attack. However, if the router has a 'remote management' feature enabled, a malicious hacker could execute an attack from anywhere on the Internet by entering the IP address of the router along with the name of the script into his or her Web browser, said the security firm. The researchers also recommended users verify that the router's remote management feature is not enabled.

Thanks, Doonz.