- Thomson technicolor modem serial#
- Thomson technicolor modem full#
- Thomson technicolor modem software#
- Thomson technicolor modem password#
- Thomson technicolor modem download#
The cable company was informed about the issue but as far as we know they have not corrected it yet. The hidden account also works remotely meaning that if you grant a visitor access to your LAN, then he can connect to the web interface and activate the previous option as a backdoor connection to the box. It is off by default for this provider, however, by activating it, it allows you to connect to the web interface from outside of the LAN with the URL. In the web interface there is a “Remote Config Management” option. This is where the first security problem arose. Nevertheless, these credentials also worked at a friend’s place who has the same operator and same box to access the web interface. It seems to be added by the cable company and not Thomson since the memory space seemed to be customized by the cable company. This is a hidden account which allows you to change the settings of the box but you can neither disable it nor change the password. But there is more, just after the account credentials, another account seems to be hard coded (value changed in the image) and this account is allowed to connect to the web interface. In addition, the WPA-PSK was also in clear text.
Thomson technicolor modem password#
The firmware strings were then displayed:Ĭustomer account and password were in clear in the firmware. The flash chip was a Macronix MX25L6405D and with the help of we were able to extract the firmware. However, the access is protected by a password and in this case, the credentials of the web interface were not accepted. In addition, a telnet server was running at this address: Then another IP address, 192.168.100.1, was noticed on the local network. However no interactive shell was available after the start-up which can happen sometimes. The operating system is RTOS eCos and runs on a MIPS BCM3380.
Thomson technicolor modem serial#
The serial port was quickly found:Īfter hooking up the serial port, the bootloader displayed interesting information: Therefore the box was opened to hunt for a serial/jtag port. After scanning the box address no other open port was found. The standard web vulnerabilities were tested on the web interface but nothing like for previous boxes was found. The good thing about this is that the internet provider delivers the box with the customer number as the login and a randomly chosen password. A web interface is accessible on to configure it. (I have also uploaded the dl.This box provides Internet access through DOCSIS and offers all the usual features found in this kind of modem.
Thomson technicolor modem full#
2.i-interface.htmlĪnd full feedback reports in Hellenic language (Greek) here U can see photos with unlocking Web interface here
![thomson technicolor modem thomson technicolor modem](https://www.provu.co.uk/products/technicolor/TG588V_V2/TG588V_V2-large.jpg)
Go to ur browser Web interface ( 192.168.1.254 ) and type Upload the modification files user.ini, vo_ny_dy5.tpl & security.cfg from dl.rarĬ. Backup all files from /dl/τoυ SpeedtouchĢ. Connect Speedtouch via FTP Client to /dl/ directoryġ. Open user.ini with un editor (like ms word or notepad) make e search and replace "YOURNAME" with ur ISP username.
Thomson technicolor modem download#
Download the modification files from hereĢ. Via FTP Client go at speedtouch /dl/ directory and copy the 3 files of dl.rar Ηοw to: Unlock AOL ST585v6sl Web InterfaceĬlick here /4h7ekg.jpg to see th Locking Toolbox via original filesĬlick here /vqmdzt.jpg to see Unlocking Τοolbox via modification files (To continue reading, please click on 'Read More')
Thomson technicolor modem software#
However, some of the ISPs preferred to have it locked down for various reasons and one may not find a 'generic' model easily! There is the option of using jtag to 'convert' the locked version into the generic one by flashing a modified cfe, but, there is also a much easier software based method provided you don't mind running older firmware and don't mind unlocking/reconfiguring again after a factory reset (not a reset of configuration but a factory reset from the CLI)
![thomson technicolor modem thomson technicolor modem](https://www.speedguide.net/images/hardware/technicolorthomson/dwg874/dwg874.jpg)
It has a good modem supporting upto adsl2+ and still relevant for Pakistan! Once the CLI is accessible with required credentials, many more options become available including bridge mode, wireless router only mode using one of the lan ports as a wan port, multi-pvc support and much more. This ( click here for some device info) was quite a popular router for ISPs and comes in many variants as used in different parts of the world! It also became popular with users once many tweaks and utilities became available for it including the DMT tool that provides advanced monitoring and configuration.