Community Forum
I'm checking to see how this vulnerability will be addressed and what the timeline looks like. Thanks for posting!
Update 4/12/16: Updated firmware fixing this vulnerability should be available soon. We appreciate everyone's patience while we test the update to ensure it's reliable and safe to push out to the affected modem models.
Update 4/15/16: Comcast has temporarily blocked access to the user interface that the firmware vulnerability relies on. We are in contact with ARRIS and working with them to provide a permanent fix. During this time, customers who want to check their signal levels can use Speed Experience. Service issues can be addressed on this Forum, by posting in the appropriate section.
--
John
xfinity.com/experience
I am an Official Comcast Employee.
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
@shimagnolo wrote:
I really hope the new firmware does not make it impossible to run an automated script to do reboots.
Well, this is what it says in the release notes for the new "1.0.6.16-SCM00" version firmware:
From: https://www.dslreports.com/forum/r30692718-
@blackjoe wrote:
Hi John, I tried the "Speed Experience" but it does not provide any signal level information.
Speed Experience will check your signal levels and report back to you if there's a problem during the test (i.e. levels are out of spec). It won't report your actual levels, however a Care agent can review your signal levels if you believe this to be causing an issue with your service.
--
John
xfinity.com/experience
I am an Official Comcast Employee.
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
@gwtx wrote:
And for some of us, it does not test the correct modem, I have a tm602 for phone and a SB6183 for internet, it tests the old 602 and report it as EOLed, and stops there. How do I get it to look and examine the correct modem?
Currently, the Speed Experience tool is in beta. I will report your individual experience with it to the team that manages the tool.
--
John
xfinity.com/experience
I am an Official Comcast Employee.
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Update: We plan to push updated firmware for the SB6120, SB6121, and SB6141 modems on Thursday.
Details are still being determined for the testing and release of updated firmware for the SB6183 and SB6190.
--
John
xfinity.com/experience
I am an Official Comcast Employee.
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Good question!
I can definitely ask our engineering folks if that's in the works.
--
John
xfinity.com/experience
I am an Official Comcast Employee.
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
If you have a SB6120, SB6121 or SB6141, the GUI lockout has been removed for these models. You might need to power cycle your modem one more time to remove it, if it wasn't removed at the time the updated firmware was pushed.
--
John
xfinity.com/experience
I am an Official Comcast Employee.
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Update 4/28/16: Customers with ARRIS models SB6120, SB6121, and SB6141 should have received updated fimware to patch the CSRF vulnerability and remove the temporary web GUI block from their modem. The updated version of this firmware is SB_KOMODO-1.0.6.16-SCM00-NOSH. If you are still experiencing the effect of the temporary web GUI block, please power cycle your modem to remove it.
Customers using the ARRIS SB6183 modem should note that a firmware update is currently being tested and will be released soon after testing is complete.
--
John
xfinity.com/experience
I am an Official Comcast Employee.
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
The ability to perform a soft reset or a factory reset was restricted in the new firmware. Resetting the modem can still be done one of two ways:
1. Disconnecting the power cable for ~ 5-10 seconds and reconnnecting.
2. Using the My Account app to reset your modem remotely.
3. Logging into xfinity.com/myaccount and completing the Internet Troubleshooting Assistant.
--
John
xfinity.com/experience
I am an Official Comcast Employee.
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
I believe there should be a pinhole reset you can perform if you need to reset the modem to factory, but I'm not clear under what circumstances a user would need to factory reset their modem?
--
John
xfinity.com/experience
I am an Official Comcast Employee.
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
No pinhole on the SB6183 but you can do this:
Have a PC connected via Ethernet. Unplug the RF cable from the cable modem. Power reset the cable modem. Once the “Power” LED comes on solid, and the “Downstream (DS)” LED begins blinking, open a Browser and go to “192.168.100.1”. Once there, go to the “Configuration” page and press the “reset Factory Defaults” button. Reconnect the RF cable. Power reset the modem.
..
@plummerl wrote:
... and if by chance, I wanted to sell my SB6141 modem (that I paid for!), I guess that without a factory reset ability, I am restricted to selling it to only Comcast customers????? This seems to amount to theft.
The config gets set via the bootfile, so the MSO can set whatever settings they want.. Keep in mind this is a cable modem and only a layer 2 device not much the user can set anyways..
Yep Nothing with a layer 2 bridge.
I am not a Comcast Employee.
I am a Customer Expert volunteering my time to help other customers here in the Forums.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
I am a Customer Expert volunteering my time to help other customers here in the Forums.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
@Thunder1013 wrote:
Just wondering how to clear the log files. I used to reset the defaults and reboot the modem once a week so they wouldn't pile up. Well since thats no longer an option. How can I clear out those log files ??
When they overflow (which is pretty limited) they overwrite themselves anyway.
I am not a Comcast Employee.
I am a Customer Expert volunteering my time to help other customers here in the Forums.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
I am a Customer Expert volunteering my time to help other customers here in the Forums.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
@gwtx wrote:
Or is this because I use a router in front of the modem?
yep I would guess your router had a problem with it..
Update 5/5/16: Customers with ARRIS model SB6183 should have received updated fimware to patch the CSRF vulnerability and remove the temporary web GUI block from their modem. The updated version of this firmware is D30CM-OSPREY-1.5.2.3-GA-01-NOSH-NNDMN. If you are still experiencing the effect of the temporary web GUI block, please power cycle your modem to remove it.
--
John
xfinity.com/experience
I am an Official Comcast Employee.
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Official Employees are from multiple teams within Comcast: CARE, Product, Leadership. We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
