probably the latter, since all of these routers were unpatched, out-of-date routers, and that's how they were exploited in the first place.

however, the article specifically states that the court documents are all redacted when it comes to the details