Yeah this smells bad. Especially given the box is set up to not accept the exploit (1mb vs 12mb).