Bitdefender Flags Arris Devices Vulnerable

[BrianInSS]

I recently upgraded my FIOS cable boxes (1 enhanced dvr + 1 stb).  It is my understanding that these devices are showing up in my Bitdefender scans as Arris Manageable Devices.  Bitdefender scans are flagging these devices on my network as containing a (moderate) vulnerability which can be exploited.

Will verizon send out an update to the STBs to patch this vulnerability?  Is there a way to force the update on my end?  Should I be concerned?

[CRobGauth]

It is a difficult question.

Because the boxes are not directly exposed to the Internet, there may not be an issue.
Certain ports can be opened because they are needed.

Does the report give any details?

[BrianInSS]

Not much detail given except to update the device (see below):

[CRobGauth · Accepted solution]

I'm guessing that BitDefender is looking at generic devices.

Has no idea as to what ports are needed to be opened for the proper operation of these boxes.

As long as you haven't done anything extra on your router, you should be fine.