1 hour ago · Tech · hide

My home internet is a Nokia FastMile 5G Gateway 3.2—an unlocked unit I bought and own, not a carrier box. Under the hood it’s just OpenWrt with a locked-down Nokia web UI bolted on top. So I spent a few evenings opening it up and extending it. It’s my router and I’ll pry if I want to! Getting root Interestingly this required no exploit—I drove the device’s own management client. The firmware only sends TR-069 out the cellular interface, so a local ACS never hears from it. Others hit the same wall and the fix is a dollar of credit at cloud.tr069.pro: log in as superadmin, point CWMP at the cloud ACS, and from there enable the root and hguser shell accounts the UI hides. SSH in, su -, done. Then turn CWMP back off. A better UI The stock web UI is minified Angular that references a Dynamic DNS backend but wires no page to it—the feature is shipped and orphaned. Rather than patch the bundle, I built a companion page styled to match, reusing the device’s own RSA/AES login crypto so it…

Commenting on Bubbles has been removed. Why? If you want to talk about this post, write to the author, use the comments on their blog if it has them, or reply with a "RE:" post on your own blog. Suggestions? feedback@bubbles.town