critical WPA2 vulnerabilities afoot, see KRACK attacks (discussion @ /r/KRaCK, HN, /r/netsec, Slashdot)

Sagemcom F@ST 1704

From WikiDevi
Jump to: navigation, search

Sagemcom F@ST 1704 (Windstream)

Manuf/OEM/ODM SGE GAW5.6U2B-5 REV1.0

FCC approval date: 09 September 2010
Country of manuf.: China

Type: wireless router, dsl modem

FCC ID: VW3FAST1704
Industry Canada ID: 9140A-FAST1704

Power: 12 VDC, 0.8 A
Connector type: barrel

CPU1: Broadcom BCM6338 (240 MHz)
FLA1: 8 MiB
8,388,608 B
65,536 Kib
8,192 KiB
64 Mib
0.00781 GiB
(Winbond W25Q64BVSIG)
RAM1: 16 MiB
16,777,216 B
131,072 Kib
16,384 KiB
128 Mib
0.0156 GiB
(ESMT M12L128168A-7T)

Expansion IFs: none specified
Serial: yes, (115200,8,N,1)

WI1 chip1: Broadcom BCM4312
WI1 802dot11 protocols: bg
WI1 antenna connector: none

ETH chip1: Broadcom BCM6338
Switch: Broadcom BCM5325E
LAN speed: 10/100
LAN ports: 4

bg

Stock FW OS: Linux 2.6.21.5

Flags: ADSL2+, boot log

Default SSID: WIN_XXXX
Default IP address: 192.168.254.254
the IP 192.168.254.254 is used by 11 additional devices
of which 1 are Sagemcom devices
Default login user: admin
Default login password: admin
admin:admin credentials used by 1036 additional devices
of which 1 are Sagemcom devices

802dot11 OUI: 6C:2E:85
Ethernet OUI: 6C:2E:85

 CPU1 brandWI1 chip1 brandWI1 chip2 brand
Sagemcom F@ST 1704BroadcomBroadcom
Sagemcom F@ST 1704NBroadcomBroadcom
For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.


Product page  • Teardown

"GAW5.6U2B-5" and "REV:1.0 081222" is silkscreened on the board.

This device may be using BCM6338 (CFE identifies as

a BCM96338 design), or possibly BCM6333.

Per the boot log, the device is running Linux.

The default SSID appears to be WIN_XXXX where XXXX is the last

two octets of the WAN interface MAC (upper case hex letters).

The WAN MAC appears to be the wireless interface MAC plus one.

The power adapter included with the device is

a Click CPS012A120080U (12V, 0.8A).

Serial[edit]

Pinout[edit]

The serial header is above the CPU. The default login

credentials for the serial console are admin:admin.
to BCM4312 <-- [RxD] [TxD] [GND] [VCC] --> to RAM

Boot log[edit]

Images[edit]