Nokia G2425G-B
Based on Mediatek MT7528 'router-on-a-chip'; a MIPS32 architecture SoC clocked at 580MHz. See datasheet link below*:
The device has hidden menus. Accessed by logging-in through web interface (http://192.168.1.254) with:
u/name: AdminGPON
p/word: ALC#FGU
This opens up a new Maintenance menu. With config options that should allow its use with certain ISPs, though not yet BT Openreach FTTP.
Has a second 'dynamic' password which needs cracking; to gain root shell, to modify MfrID and YPSerialNum for Openreach.
billybollox@redhat:~$ ssh [email protected]
[email protected]'s password: ALC#FGU
Hello, Welcome to User CLI (version 0.95).
user> ?
enable Turn on privileged mode command
help Description of the interactive help system
list Print command list
show Show running system information
user> enable
user# show
user(show)# list
arp
buildinfo
cpu
dns
end
exit
help
hspa modem
hwversion
igmp
ip default-gateway
ip route
lan ip dhcp
lan ip hosts
lan ipv6 dhcp
lan ipv6 hosts
lan stats
list
logfile (syslog|omci|voice)
mem
nat count [A.B.C.D]
nat entries [A.B.C.D]
nat rules
network interface (IFNAME|all)
reboot
ridump
route
swversion
sysinfo
sysmon
virtualserver
voice port
voice status
wan (WAN1|WAN2|WAN3|WAN4|WAN5|WAN6|WAN7|WAN8|all) statistics
wan (WAN1|WAN2|WAN3|WAN4|WAN5|WAN6|WAN7|WAN8|all) status
wan (WAN1|WAN2|WAN3|WAN4|WAN5|WAN6|WAN7|WAN8|all) uptime
wifi client list
wlan
user(show)# ridump
the Format:01
the HardwareVersion:3FE48296BAAA
the PartNumber:3FE48297AAAA
get mac 04:25:e0:94:e4:40 success
the YPSerialNum: B3F13336
the MfrID:ALCL
the Factorycode:02
the ICS:01
the CleiCode:0000000000
the Mnemonic:G-2425G-B
the CountryID:eu
user(show)# exit
*
https://files.seeedstudio.com/products/114992470/MT7...