Cisco 677 and 678 routers are vulnerable to the codered worm if the web interface is enabled.

To disable the web interface:

telnet to the router and type the following

enable
(yourpassword)
set web disable
write
reboot

that should fix it.