So I am a proud owner of the ever popular ARRIS SURFboard SB6141 modem. In which I bought from a retailer to rid off the leased garbage Comcast was lending me.
In latest news/discussion this modem has been vulnerable to a pretty overlooked attack or "flaw".
https://www.dslreports.com/forum/r30690513-Some-SB61XX-modems-may-be-vulnerable-to-a-CSRF-attack
https://www.dslreports.com/forum/r30690458-Security-Some-Moto-ARRIS-SB61XX-modems-may-be-vulnerable-to-a-CSRF-attack
TLDR: One could execute a remote reboot of the modem with no authentication.
NOW, Comcast is working closely with the manufacturer of this modem to resolve such matters. Which brings me to my question. While I fully respect and surprised that Comcast is doing their part in this. Can they "LEGALLY" be allowed to push firmware updates to my hardware? Thoughts?
Thread Detailing what is being done from Comcast:
Not by German law. Can not speak for the US by any means.
Ahh Yes Guess I should mention that.
US Law :D
even if comcast can legally do it dose the firmware exist that allows such functionality?
most routers/modems I've ever used will grab updates from the manufacturer or manually applied from a local PC.
I have the exact same modem, like when I opened the amazon page it alerted me to as of when I had purchased this modem. Well shit. I'd like to know if this is something that Comcast can do, that'd be of a huge interest.
If I remember things correctly, a Modem has one open port at all times to push a firmware/update to the device from manufacture.
Most likely Comcast is being worked with as they have the largest amount of customers world wide?
There maybe T & Cs when you connect to their networks that allows them to push firmware and settings.
in US law they cannot legally exchange your modem for a proprietary modem so long as the modem you have complies with their standards...