![]() ![]() ![]() They are in a plain text file in the device's file system. At least in some Technicolor devices including the TG789vac v2, the TR-069 (remote control and update by ISPs) credentials and control server address can be easily found once you have a root shell. An exploit that allows a user to get root access for several of these devices is known and has been published on the Internet You are not completely wrong, however you must take into account that: Please note that the ISP does not have the source code since all the actual development is done by Technicolor, that receives instructions on how to customize it and just provides the flashable binary to the First, I'm sorry, but I do not understand Swedish, but I think I got your reasoning anyway. ![]() If you cannot get the version number, try with the GUI-provided one anyway, but they have been known to refuse requests that didn't state "their" build number. If you have somehow gained access to a shell on your device, you can check the "actual" FW version by issuing the "software version" command on the telnet/ssh shell (on earlier models) or by looking at the contents of /etc/banner on OpenWrt-based newer models (by the way, they shamelessly replaced the big OpenWRT ascii art logo with their own). If the version displayed in your web UI does not match this pattern, then it has merely been renamed upon request by whoever commissioned that firmware (usually an ISP). Please clearly state the device model and the exact software build version, it should be something like xx.x.xxxx-xxxxxxx such as -1681035 for newer, OpenWrt-based firmwares, and something like x.x.x.x such as 10.A.2.5 (x's can be letters too) for older firmwares based on Linux 2.6. This time, as I said, it seems that their own legal department has pressured the developers/whoever has to prepare the archives to act, or has been somehow notified of this, as they were cc'd in the last email.Īlso, if anyone else wishes to request source code for any of Technicolor's devices, I suggest to do it now, so if they don't comply at least I will have more proof that my case is not an isolated one. I most certainly will, if by next week Technicolor doesn't send the source code. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |