can remote AT commands be disabled on a router by X-CTU(or any other) software, so that no other person could change the pin configurations remotely even if he knows the pan ID etc. of the router.
No it is not possible to disable the remote AT command function but you can reduce issues by setting encryption, PAN ID and Joining on the network.