ZTE MF286 has built-in factory backdoor allowing root shell access on embedded Linux running inside router. However since we don't know RSA-2048 private key used for encrypting device specific password we're not able to use this. Which doesn't mean we won't have other means to gain root shell.
Showing posts with label ZTE. Show all posts
Showing posts with label ZTE. Show all posts
Sunday, March 26, 2017
Thursday, March 23, 2017
Locking custom LTE bands on ZTE MF286
My ZTE MF286 is running DNA firmware version B04. It's somewhat limited in LTE band selection, but that can easily be worked around with curl.
Inside ZTE MF286 router
ZTE MF286 4G router is built around Qualcomm QCA9563 soc with 802.11bgn, QCA9882 802.11ac wlan, QCA8337 gigabit switch and MDM9230 LTE chip. There's also tempting serial port knowing all components used are already supported by LEDE (that has replaced OpenWrt).
Photos here.
Photos here.
Subscribe to:
Posts (Atom)