SD card should do it; if someone had root access on the boxes they could have lobotomized things like the upgrade firmware section.
So how did it happen? Are these things on the internet or behind a NAT firewall at your house? If the latter you might have a compromised desktop or something that was used as a jump vector.....