I&#x27;m not sure I&#x27;d trust Arris products at this point. From another blog post in 2014: &quot;It is worth noting that on previous FW revisions the CGI calls did NOT require any authentication and could be called without providing a valid &quot;credential&quot; cookie.&quot; <a href="http:&#x2F;&#x2F;console-cowboys.blogspot.ca&#x2F;2014&#x2F;09&#x2F;arris-cable-modem-backdoor-im.html" rel="nofollow">http:&#x2F;&#x2F;console-cowboys.blogspot.ca&#x2F;2014&#x2F;09&#x2F;arris-cable-modem...</a><p>With mistakes like that, and three layers of backdoors, I&#x27;m half expecting discoveries of hardware backdoors next ...