CYCLONE Hx9: NSA Exploit of the Day

Today's item from the NSA's Tailored Access Operations (TAO) group implant catalog:

CYCLONE Hx9 (S//SI//FVEY) EGSM (900MGz) macro-class Network-In-a-Box (NIB) system. Uses the existing Typhon GUI and supports the full Typhon feature base and applications.
(S//SI//REL) Operational Restrictions exist for equipment deployment.
(S//SI//REL) Features:

• EGSM 900MHz
• Macro-class (+43dBm)
• 32+Km Range
• Optional Battery Kits
• Highly Mobile and Deployable
• Integrated GPS, MS, & 802.11
• Voice & High-speed Data
• GSM Security & Encryption

(S//SI//REL) Advanced Features:

• GPS -- Supporting Typhon applications
• GSM Handset Module -- Supports auto-configuration and remote command and control features.
• 802.11 -- Supports high speed wireless LAN remote command and control

(S//SI//REL) Enclosure:

• 3.5"H x 8.5"W x 9"D
• Approximately 8 lbs
• Actively cooled for extreme environments

(S//SI//REL) Cyclone Hx9 System Kit:

• Cyclone Hx9 System
• AC/DC power converter
• Antenna to support MS, GPS, WIFI, & RF
• LAN, RF, & USB cables
• Pelican Case
• (Field Kit only) Control Laptop and Accessories

(S//SI//REL) Separately Priced Options:

• 800 WH LiIon Battery Kit

(S//SI//REL) Base Station Router Platform:

• Overlay GSM cellular communications supporting up to 32 Cyclone Mx9 systems providing full mobility and utilizing a VoIP back-haul.
• GPRS data service and associated application

Unit Cost: $70K for two months
Status: Just out of development, first production runs ongoing.

Page, with graphics, is here. General information about TAO and the catalog is here.
In the comments, feel free to discuss how the exploit works, how we might detect it, how it has probably been improved since the catalog entry in 2008, and so on.