The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-4720
http://www.securityfocus.com/bid/61169