Researchers find standards-compliant functionality can be abused to hijack modems, downgrade connections, and even execute code