Zain Broadband 2.0 (Security flaws): Free Internet/VoIP calls with Huawei Echolife BM635

Free Internet

• Login to Huawei Echolife BM635 via telnet.
  
  telnet 192.168.1.1

• Enter username / password and then press ENTER
  username: huawei
  password: Adt26BnE

• At ATP prompt
  type setallmacaddr XX:XX:XX:XX:XX:XX & then press ENTER (where XX:XX:XX:XX:XX:XX is a valid WAN MAC address)
  e.g. ATP> setallmacaddr 4C:54:99:12:12:12

• Type restoredef & press ENTER

• Huawei BM635 will restart with new MAC address and default configuration.

• If done correctly then you will be connected to the Internet (with  subscriber IP address)

Free VoIP Calls (Untraceable calls)

Security threat

• Point your browser to 192.168.1.1
• Login using admin:2gzVL6MT
• Click on Basic > VoIP > SIP User
• Enter SIP Super Password (link)
  then enter a valid VoIP number in SIP ID & Username fields
  Note: SIP ID & Username are same i.e.
  SIP ID: 13644272
  Username: 13644272
  Password: !@#$%^&*()_
• Click on Apply then on Register

You can check the status of VOIP registration under STATUS > VoIP

Note: This will only work if you are using Zain WiMAX

• If done correctly then you can call for free (using subscriber call credit)

END!