Talk:Winstars WS-WN536A8
multiple wavlink and winstars vulnerabilities. openwrt flashing available to remove said vulnerable firmware
Links of Interest
![[icon]](/wiki/File:Wiki_letter_w_cropped.svg){kind=small} | This section is empty. You can help by adding to it. (November 2019) |
Trick discovered to enable telnet on Wavlink WS-WN536A8 factory firmware Hardware There is a hidden web page at http://192.168.10.1/webcmd.shtml. Once you are on this page type telnetd into the command box and press the apply button. nothing will show up in the lower box as a reply but if you port scan the device you will find port 2323 is now open for telnet. the default login=admin password=admin.
https://james-clee.com/2020/04/18/multiple-wavlink-vulnerabilities/
Backdoor Unauthenticated RCE – CVE-2020-10971 and CVE-2020-10972 This is regarding : JETSTREAM AC3000 aka ERAC3000 WS-WN536A8, WS-WN533A8, ARK T6, Quantum Max, Quantum T10, Quantum T12, Quantum D4C, Quantum D4, Quantum D6Q, Quantum D6, Quantum T8, Quantum T6
Flashing
 | NOTE: During configuration or flashing a device, the only things that should be hooked to the device is the computer and power. |
Openwrt with original source instructions: https://github.com/bubbadestroy/Jetstream_AC3000
