As far as I can tell, my linksys router isn't open to the outside world on port 80 or 8080. I did just recently switch back to the stock firmware, from an older version of dd-wrt.
Sounds yucky for sure. No one expects their router to be exploited in this nature.
This is the page in question, as far as my router goes, and the remote config settings.
As you can see, mine are off.