Users of IoT products from three major vendors at risk of DDoS attacks, data leaks