Jogibaer's profile

New Contributor

 • 

3 Messages

Closed

Fail to uncheck remote Management

I have my CG 3000D now over 1 year and am kind of satisfied with the performance. Lately I discovered this Remote Management Option after I did a security check over the Internet. The Text in Blue highly recommend that this box should be unmarked. But if I clear the box and push the Apply button the box is still checked. There is also no erase button to reset the Factory Default Settings. I also tried to add an IP Address but it is not possible. The IP Address disappeared and the box is checked again.

Contributor III

 • 

806 Messages

Is remote management enabled by default? Or is the IP range just locked in when you enabled remote management. If the former, and its a default 8080 port, then that is a sizable security risk. If its the later, as long as you have a decent password and force HTTPS it should still be pretty secure. White listing for remote management isn't a little overkill IMHO.

New Contributor

 • 

3 Messages

All entries in "Remote Management" are enabled by default and I can't change anything. It seems all the entries are burnt into the System, not changeable at all. I am pretty sure its a security risk because Nessus is telling me there is a risk (moderate). On the other Hand, why are these entries fix ?

Contributor III

 • 

806 Messages

Yea, thats not good. If remote management is enabled and unable to be turned off, and with no IP white list, pretty much anyone would have access to your router. I suggest changing your router password from the system default. Was this Cox's attempt at home network management? I hope not. This needs a firmware fix stat. This was on a Netgear wireless gateway you got from cox right?

New Contributor

 • 

3 Messages

Yeah, its a Netgear Residential Gateway 3000D-RG

The firmware is up to date.

Specifikation: DOCSIS 3.0

Software Version: V5.5.4.mp2_CPR14c

Maybe NSA was asking for this open door :)

just kidding....

I will contact COX Support and ask for a new router.

Thank you.

Contributor III

 • 

806 Messages

Sounds good. Thank you for bringing this to the communities attention.

ATT Moderator, could you comment on this? I see this as a security vulnerability and something that needs to be patched. Do you agree? Thanks