> As mentioned by several comments, an import defensive step that most home users can take is to ensure you have a firewall rule in your router blocking any tra

> As mentioned by several comments, an import defensive step that most home users can take is to ensure you have a firewall rule in your router blocking any traffic on your LAN from accessing the modem on its LAN port, and any traffic originating from the modem LAN IP from getting onto your LAN. Yep, most of this vulnerability is (very) old news. There used to be a vulnerability for the very popular Motorola / Arris SB series where any website could CSRF into the modem's webpage and do a "reset", which would shut off your internet for up to half an hour until it could reprovision with your ISP. There was even a proof of concept site that did this (with a big red warning first), I really wish I could remember the domain name. Anyway, I used that modem and of course I just completely blocked access to its IP address on my router's firewall. It's really incredibly unfortunate that even today you have to be tech savvy to protect yourself from the devices running in your home. Basic security should come default. Here's a another vulnerability for you. On my grandparents' DSL, the ISP supplied combined modem/router has a config page that is (mostly) not password protected. You can see the passwords for every SSID without logging in, you can reset the router, see information on other devices connected to the network, etc etc. Absolute insanity. Edit: I did find the website, but it was eventually taken down by the creator after (most?) ISPs patched the problem. https://web.archive.org/web/20160921191154/http://www.rebootmymodem.net/ https://web.archive.org/web/20160921191154/http://www.reboot...