Thomson TCM390

Does anybody has ANY info bout uncapping Thomson TCM390 modems... i tried the follwing things already:
1. Sniffed the network and found out the name of the config-file

... and that's all... I only need the ip of the trivial ftp server to go on.. but I stuck with this.. any ideas?

I'm not sure, but I have an arris cornerstone which is actually the same modem.
If I connect to the modem with a ip address from the modems range I can give SNMP commands!
It lists the server (172...)..
But I can't connect from my computer to the TFTP server...

ok only chello.blocks snmp you can't connect any more :-[