The compromise of an ISP ACS or the link between an ACS and CPE by unauthorized entities can yield access to the TR-069-enabled devices of a service provider's entire subscriber base. Customer information and device operation would be available to the potential attackers, including other MAC addresses on client's networks.
Compromising an ISP's ACS or the link between an ACS and CPE by unauthorized parties can result in a breach of security for all subscribers' TR-069-enabled devices. This could expose customer data and device operations, including information from other devices on the same network.