- The FCC has formally labeled Arris a national security threat - The FCC has formally labeled this manufacturer a national security threat. Federal contractors and anyone working remotely for sensitive employers faces specific exposure.
- Arris can change settings on your router without telling you - Your ISP can access this router remotely to push updates and diagnose issues. This is normal for ISP-owned equipment, but it means there’s another party with admin access to your home network.
- A flaw in the modem firmware lets attackers on Arris's network intercept every connection your home makes - A flaw in the modem firmware lets an attacker on your ISP's network intercept or redirect every connection your home makes - banking sessions, video calls, smart home commands - before your router ever sees them.
This router has documented security problems. Every device on this network - your work laptop, banking app, Ring camera, smart lock - is running at higher risk than it should be.
An F is not a warning - it’s a finding that the router has been independently flagged for security or supply-chain concerns serious enough to warrant action.
-
The FCC has formally labeled Arris a national security threat
The FCC has formally labeled this manufacturer a national security threat. Federal contractors and anyone working remotely for sensitive employers faces specific exposure.
Show technical detail
Foreign manufacture - FCC ban applies: The ARRIS SURFboard G36 is manufactured in China. The FCC's March 2026 foreign manufacture ban applies to ISP-supplied cable gateways. Contact your ISP about replacement options.
-
Arris can change settings on your router without telling you
Your ISP can access this router remotely to push updates and diagnose issues. This is normal for ISP-owned equipment, but it means there’s another party with admin access to your home network.
Show technical detail
ISP controls all firmware and configuration: When supplied by an ISP, ARRIS SURFboard gateways are fully managed by the provider. Firmware, remote access, and advanced security settings are all under ISP control.
-
A flaw in the modem firmware lets attackers on Arris's network intercept every connection your home makes
A flaw in the modem firmware lets an attacker on your ISP's network intercept or redirect every connection your home makes - banking sessions, video calls, smart home commands - before your router ever sees them.
Show technical detail
CommScope/ARRIS is US-headquartered - no Chinese government legal exposure: CommScope Inc. is a US company. The concern is manufacturing origin under the FCC rule, not brand jurisdiction.
An A-rated alternative is shown below.
We'll email you if a new vulnerability hits your Arris SURFboard G36. One email per incident. No spam.