@sapphire @skylar no, it's usually either simple passwords or misconfigured services that allow code execution being exposed. Redis is popular here.
Also, L'Eunuchs-based SOHO routers are the literal scourge. Half of them have backdoors right out of the box.