6.2.Firmware Updates
Unitymedia will not include CVC information in bootfile.Therefore, Unitymedia will not trigger Secure Software Download being referenced in [i.4]Chapter 8.2.3, [i.3]Chapter12.1 and [i.5]Chapter14.
Updates for Docsis Cable Modem and / or eRouter MAY be installed via vendor-own solution, for example local GUI Upload / flash.
Recommendation:
It is recommended, that the general idea of validation of the trusted source for the software-image will still be in place for locally triggered software updates.
This could be achieved by only providing manufacturer CVC certified software-images and adapt the process of validation described in [i.5]Chapter14-to a local process.