I haven't tried it myself, but this chain of comments at /r/netsec[1] suggests it doesn't help: > I'm guessing a workaround is to use a 3rd party router and bl

I haven't tried it myself, but this chain of comments at /r/netsec[1] suggests it doesn't help: > I'm guessing a workaround is to use a 3rd party router and block traffic to 192.168.100.1 which is the IP of the management UI when in modem only mode, presumably the external IP can still be retrieved in modem only mode > If it's still active in modem-only mode, it essentially precludes use of these routers entirely for any sensitive comms. > The web interface is still available in bridge mode with Liberty Global's Arris modems, yes. > Just tried it on my device in modem-mode and it does indeed still expose the snmpGet endpoint. As suggested above, i've firewalled all traffic to 192.168.100.1 on my own firewall. [1] https://www.reddit.com/r/netsec/comments/pnzs0n/silently_unmasking_virgin_media_vpn_users_in/ https://www.reddit.com/r/netsec/comments/pnzs0n/silently_unm...