Winstars WS-WN536A8

abgn+ac (AC3000)
Wi-Fi Router
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Status Unknown
Tomato any flavor	Incompatible
Platform
Brand • Model • Rev	Winstars WS-WN536A8
FCC ID	NZ3-WN536A8
Type	wireless router
CPU1	MediaTek MT7621AT
CPU1 Type	MIPS 1004Kc
CPU1 Speed	880 MHz ( 2 cores ) 16-bit
Flash1 Chip	GigaDevice GD25Q64CSIG3
Flash1 Size	8 MiB8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br />
RAM1 Size	128 MiB134,217,728 B <br />1,048,576 Kib <br />131,072 KiB <br />1,024 Mib <br />0.125 GiB <br />
RAM1 Chip	Nanya NT5CB64M16GP-EK
ETH chip1	MediaTek MT7621AT
Switch	MediaTek MT7621AT
Ethernet Port Count	1-1GbE-WAN 4-1GbE-LAN
Wired Standard	IEEE 802.3i/3u/3ab
802dot11 OUI: none specified
Expansion IF types	Mini PCIe, USB 3.0
Mini PCIe slots	2
USB ports	1
USB Hub Compatible	Untested
Power	5 VDC, 4 A
Connector type	barrel
Flags: Wave2, MU-MIMO, 256QAM
Additional chips 5GHz Front-End Module;Skyworks;SKY85734-11;SKY, 5735, 6656;6; 2.4GHz Front-End Module;Skyworks;SKYxxxx;;2;12-pin;
Other
Default SSID: Wireless-N (6 addl. devices) , Wireless-AC (3 addl. devices) , Wireless-AC-1733M Default IP address: 192.168.10.1 the IP 192.168.10.1 is used by 124 additional devices of which 6 are Winstars devices Default login user: admin Default login password: admin admin:admin credentials used by 1342 additional devices of which 5 are Winstars devices
Retail
FCC approval date	23 August 2018
Radio 1
Radio1 module	Winstars WS-WN7615D-C
Radio1 module IF	Mini PCIe
Chip1	MediaTek MT7615DN
Wireless interface OUI	none specified
Antenna Connector Type	U.FL
MIMO status	2x2:2
Wireless Standard	IEEE 802.11b/g/n
N-QAM	up to 400 Mbps
802.11n	up to 300 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
WiFi Operating Frequency	2.4 GHz
Radio 2
Radio2 module	Winstars WS-WN7615D-C
Radio2 module IF	Mini PCIe
Chip1	MediaTek MT7615DN
Wireless interface OUI	none specified
Antenna Connector Type	U.FL
MIMO status	2x2:2
Wireless Standard	IEEE 802.11a/n/ac
802.11ac	up to 867 Mbps
N-QAM	up to 400 Mbps
802.11n	up to 300 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	5 GHz
Radio 3
Radio3 module	Winstars WS-WN7615A-C
Radio3 module IF	Mini PCIe
Chip1	MediaTek MT7615N
Wireless interface OUI	none specified
Antenna Connector Type	none specified
MIMO status	4x4:4
Wireless Standard	IEEE 802.11a/n/ac
802.11ac	up to 1733 Mbps
N-QAM	up to 600 Mbps
802.11n	up to 450 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	5 GHz

For a list of all currently documented MediaTek chipsets with specifications, see MediaTek.

For a list of all currently documented Winstars device with specifications, see Winstars.

• 1733 Mbps - 4SS 5GHz 802.11ac (80MHz chan.) backhaul,

• 867 Mbps - 2SS 5GHz 802.11ac (80MHz chan.),

• 400 Mbps - 2SS 2.4GHz 802.11n (40MHz chan., 256-QAM) = AC3000 class

Overview

See also: Winstars

Model Difference Statement: "We would like to confirm the models:

• WS-WN536A8, WS-WN533A8, ARK T6, Quantum Max, Quantum T10, Quantum T12,

• Quantum D4C, Quantum D4, Quantum D6Q, Quantum D6, Quantum T8, Quantum T6

are same in all respects. Only the model name and appearance is different.

The model WS-WN536A8 is the tested sample."

Links of Interest

Trick discovered to enable telnet on Wavlink WS-WN536A8 factory firmware Hardware local router address

http://192.168.10.1/webcmd.shtml

Once you are on this page type telnetd into the command box and press the apply button. nothing will show up in the lower box as a reply but if you port scan the device you will find port 2323 is now open for telnet. The default login=admin password=admin

https://forum.openwrt.org/t/trick-discovered-to-enable-telnet-on-wavlink-wl-wn570ha1-factory-firmware/49342

BACKDOOR Unauthenticated RCE – CVE-2020-10971 and CVE-2020-10972

Devices regarding:
JETSTREAM AC3000 aka ERAC3000 WS-WN536A8, WS-WN533A8, ARK T6, Quantum Max, Quantum T10, Quantum T12, Quantum D4C, Quantum D4, Quantum D6Q, Quantum D6, Quantum T8, Quantum T6

https://james-clee.com/2020/04/18/multiple-wavlink-vulnerabilities/

https://www.youtube.com/watch?v=K-o0U8sQh-c&t=13s

Flashing

Flashing OpenWRT

DIRTY FLASH Openwrt with original source instructions:

https://github.com/bubbadestroy/Jetstream_AC3000

See also

• List of Tri-Band Wireless Devices (MediaTek AC3000)