CVE-2009-5149: Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have pred...

Security readout for executives and security teams

Some Arris cable modem/router models used predictable technician passwords. If the web management interface is reachable, an attacker could potentially derive the technician password and access device administration. The source bundle names specific Arris DG860A, TG862A, and TG862G firmware builds; it does not provide CVSS scoring, confirmed exploitation, or vendor patch details. Exposure is most likely where affected Arris gateways remain deployed with vulnerable firmware and the web management interface is reachable from untrusted networks. Risk is lower if management access is disabled, isolated, or strictly limited to trusted administrative paths. Treat this as a priority for network-edge asset review. The business risk is unauthorized administration of customer-premises or small-office gateway devices, especially if exposed management interfaces remain reachable. Urgency depends on whether affected devices are still deployed and externally accessible. Mitigation focus: Inventory Arris DG860A, TG862A, and TG862G devices and firmware versions.; Restrict web management access to trusted administrative networks only.; Check current vendor or ISP guidance for firmware updates or replacement options..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.