@pppig236 and others, earlier in this thread @hurrian mentioned 3.2.0.9 and earlier is the vulnerable version, and 3.2.0.11 and later is patched. I did not find 3.2.0.11 at the normal firmware download links, but @cr1000 shared it in this thread. It’s located at https://cdn3.vzwdm.com/hdm/chr2fa_fw_3.2.0.11_oldsig_1685136655890.bin. The oldsig part of the file name is interesting as well, as we haven’t seen that in any other firmware links. I don’t have a CR1000A device, but since it’s a transitionary firmware it might be possible to roll back to this version? Anyone can download from this link, and it was actually the first firmware that I successfully extracted. I have now extracted 3.2.0.9 as well. Here is a temporary link to the 2 decrypted rootfs, perhaps someone can find what change was made and then look we can look for a work around?