If your router isn’t even a Linksys router, then it’s most likely a false positive result and can be safely ignored. If you want to be extra sure, you could attempt to actually exploit the vulnerability with routersploit and see whether you get anywhere.
In general, the fix for a vulnerability in an end-user network device is some combination of “update the firmware” and “disable the vulnerable feature”.
I mostly rely on built-in “scheduled send” features these days, but in the past (and possibly future, can’t remember!) I’ve used Time Cave and been happy with it.