Machines in 18 states can be hacked in 2 min or less with no tools