Talk:Winstars WS-WN536A8

From TechInfoDepot
Jump to navigationJump to search

multiple wavlink and winstars vulnerabilities. openwrt flashing available to remove said vulnerable firmware

Links of Interest

https://forum.openwrt.org/t/trick-discovered-to-enable-telnet-on-wavlink-wl-wn570ha1-factory-firmware/49342

Trick discovered to enable telnet on Wavlink WS-WN536A8 factory firmware Hardware There is a hidden web page at http://192.168.10.1/webcmd.shtml. Once you are on this page type telnetd into the command box and press the apply button. nothing will show up in the lower box as a reply but if you port scan the device you will find port 2323 is now open for telnet. the default login=admin password=admin.

https://james-clee.com/2020/04/18/multiple-wavlink-vulnerabilities/

Backdoor Unauthenticated RCE – CVE-2020-10971 and CVE-2020-10972 This is regarding : JETSTREAM AC3000 aka ERAC3000 WS-WN536A8, WS-WN533A8, ARK T6, Quantum Max, Quantum T10, Quantum T12, Quantum D4C, Quantum D4, Quantum D6Q, Quantum D6, Quantum T8, Quantum T6


Flashing

Openwrt with original source instructions: https://github.com/bubbadestroy/Jetstream_AC3000