The under-$100 device shows how hackers with brief physical access to an aircraft could pose a serious cybersecurity risk.