first, I think you would want to block administration of the 2nd router from wireless, however the 3rd party does it.
I assume you turned off the wireless in the Actiontec?
Lastly, I don't think you can block administration from wired ports. As suggested, change the password.