Super admin access to Huawei HG8245

Question

When I'm connecting to the HG8245's web interface as root/admin, I get only partial access to some of the router options.

I've tried resetting the router settings and connecting to the router via telnet (i.e. telnet 192.168.100.1 23) to find out the super admin account in the config file but with no luck.

Is there any way I could factory reset the router or get super admin access?

Solution 1

Getting the router's config

Looks like Huawei uses the same encryption key on the configs for all routers and according to a Spanish language forum it was present in a file on the router /etc/wap/aes_string.

I have found the source code for the tool aescrypt2_huawei that is provided and a walk-through provided on a blog called TheZedt. It seems the Huawei uses the same configuration encryption key hex:13395537D2730554A176799F6D56A239 on all of its devices and the only thing special about the binary version of the tool is the fact it adds an 8-byte header to the file. You can see the source code link for a more detailed explanation.

As the walkthrough and @Blz mentions you can modify the UserLevel to 0 and reupload it to the router, but... I strongly recommend you add a new user rather than modify an existing account. You'll need to generate a new password hash using the formula SHA256(MD5(new password)). Test to make sure you can generate the same hash as the root account in the file by testing with 'admin'.

On a Mac

echo -n admin | md5 | tr -d '\n' | shasum -a 256

yields

465c194afb65670f38322df087f0a9bb225cc257e43eb4ac5a0c98ef5b3173ac

in the file

<X_HW_WebUserInfoInstance InstanceID="1" UserName="root" Password="465c194afb65670f38322df087f0a9bb225cc257e43eb4ac5a0c98ef5b3173ac" UserLevel="1" Enable="1" ModifyPasswordFlag="0" PassMode="2" />

Hashes match.

Solution 2

Have you tried logging in as user telecomadmin and pass admintelecom? It's a default hardcoded user // pass for Huawei HG8245/HG8245T and as far as I know it's not possible to even change this user's password (at least not from the web UI), which is quite ridiculous!

Comments

[jstq]

is there a way to change this telecomadmin password? Or its for local login only?

[plamer]

No idea, I can only access my huawei from the UI and I can't find anything about this user there. Just to be sure I've forwarded my public ip port 80 to a home machine :)

[fixer1234]

Welcome to Super User! External links can break or be unavailable, in which case your answer would not be useful. Please include the essential information within your answer and use the link for attribution and further reading. Thanks.

[fiberOptics]

This worked! Thanks