We've been discussing it on another forum for a few days now. The single biggest thing to remind people of is that they should disable remote management. That will completely eliminate the vulnerability. As an aside, it's also a good idea to change the default administrator's password.
