This is the same experience I've had targeting most ISP provided modems/routers.
It has however been a while since I've looked at newer models here but they basically used to drop into a shell via UART or JTAG in most cases without any funny business needed.
https://stefan-gloor.ch/yomani-hack
#POS #CreditCardTerminal #gotroot