It's a fair question.... They appear to be running an un-patched and ancient version of BusyBox (circa 2011).... Which would/could be susceptible to multiple CVE's including most of these. By requesting the source, he will be able to quickly discern if appropriate patches have been refactored or not.
... View more