The firmware update authentication method in the affected devices relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device. If this key is extracted, it could be used to install arbitrary firmware on other devices.