The problem is the way the Arris SB6141 handles authentication and cross-site requests, according to a report from Seclists.org. Clicking on a disguised link on a website or in an email can cause a service interruption. If that happens your modem will likely reboot or reset. With a reboot, your internet service should come back promptly; a reset takes longer and you may even have to call the cable company to have them reactivate your modem.
In a statement to Zdnet, Arris stated that only a subset of the SB6141s are in jeopardy. The company also reiterated that it is unaware of any exploits of the authentication vulnerability, which was documented way back in April 2008.
An Arris spokesperson told Digital Trends that the company has “recently addressed the reported GUI access issue with a firmware update. We are in the process of working with our Service Provider customers to make this release available to subscribers. There is no risk of access to any user data, and we are unaware of any exploits.”
Unfortunately there’s no way for you to check whether your modem is on the good list or the maybe-no-so-good list. Major cable internet providers including Comcast, Time Warner Cable, or Charter sent the Arris (formerly Motorola) cable modems to millions of new customers.
The firmware upgrade isn’t one that can be installed by users yet, so if you have a vulnerable SB6141, a technician will have to pay a visit. The best course of action: call your cable company about the firmware upgrade and get on the list if needed. And in the meantime, be ever more vigilant about clicking on unknown websites and unexpected links in email or online messages.
Updated on April 11 at 5:15 p.m. ET by Bruce Brown: Arris reached out to us with new information. We’ve updated the article, which was originally published Saturday.
