ZXDSL 931 DII is another Unifi backdoor?

will — Sun, 30 Oct 2011 03:50:16 +0800

If you get unifi in an apartment (like I did today) you will not only receive the well-studied TMnet DIR-615, but also a zxdsl 931dii.

It's a bit of a crazy situation - the ZXDSL connects to the Unifi over copper not fibre, but it doesn't have any wifi. So they connected another box, the DIR615 to provide the wifi. As far as I can see, that's the main benefit.

To login and snoop around the zxdsl, hardcode your ip address on your laptop to something in 192.168.1.* (e.g. 192.168.1.8) then connect your laptop wired to the 2nd port of the ZXDSL. Leave the 1st port connected to the DIR615. As far as I can see, you can't login via the DIR615 .

Now login:

ip : 192.168.1.1
login name : admin
password : hs5711Bbvl

(as posted by user narf03 back in May)

You immediately get a big red warning from TMnet about no privacy, they will record and log any illegal activity, pass to police etc etc.

If you now login you'll find all sorts of goodies that should probably not be changed. But you probably SHOULD change that password.

You can find:

the very high rate your VDSL is connecting at (presumably the throttling to your 5/10/20 is done at the Tmnet end or in the nearby unifi box) I got something like 40mb/s up and down.
IP address of your phone...
More options for TR069 - should these be disable again like for the DIR615?
The other end of the 'bridge' that you can see in 'operator' login on the DIR615.

One more thing , on my 7.09 firmware DIR615, I still got

username : admin, password : blank
username : operator, password: h566UniFi

Lowyat.NET: Latest topics by will

ZXDSL 931 DII is another Unifi backdoor?