TR-069 is the standard remote management protocol that ISPs use to control consumer-premises equipment (home routers, set-top boxes, VoIP phones etc.). We continue our DEF CON TR-069 presentation and explore client-side vulnerabilities. We analyze implementations, pour insight into mysterious results from our internet-wide scans, and follow to code execution on millions of online devices again.