Bests & Worsts Reviews from Amazon

according to people

482
people found this helpful, as of 2023
ranked #38,732 most helpful out of 571,544,897 reviews
★☆☆☆☆
Flawed Security
There is a huge hole in the security of this modem, wherein during provisioning the ISP can change the default (factory-reset) admin password, thus disallowing you access to its configuration settings. Motorola customer support is well aware of the issue and even knew exactly what my ISP had changed the admin password to ("badjuju9" for all the Metrocast users out there). Motorola's excuse is that they need to provide the ISP with access to the firmware during provisioning, which makes some sense. However, the default admin password should be stored in read-only memory, which should be accessed when the modem is hard/factory reset (by holding down the reset button for 10 seconds). As it exists, a factory reset only resets the password to the ISP-modified value. Yes, my ISP deserves ire for their actions, but Motorola also deserves criticism for enabling ISPs to hijack their customers' personal property by means of their slipshod firmware security. Had Motorola customer support not already known what my ISP changed the default password to from prior experiences with my ISP (my ISP would not acknowledge to me that they had changed it, let alone tell me what they had changed it to), I would have been unable to configure my modem's security settings. This would have left me wide-open to attacks by not being able to change default wifi passwords, enable MAC-filtering, access firewall settings, etc. Furthermore, should my ISP feel like it, they can still re-provision my modem at any time, altering the default admin password to some unknown value, and essentially brick my modem - at least as far protecting my security goes. I realize that there may be instances when entities want to change what the default factory-reset admin password is, such as when employees who have physical access to the modem should not be allowed to arbitrarily reset the password. That is a rare situation, and does not apply to most end-users of this product (maybe it's an option to consider in a high-end commercial model, not this consumer model). However if that is a required feature, then altering the default factory-reset admin password should also require physical access to the modem. In order to avoid abuses and security issues, it should not be possible to remotely alter said password, especially from outside the device's local intranet.
October 2017 · Electronics · verified purchase
worser bester