Badcaps.net Forum
Go Back   Badcaps Forums > Troubleshooting Hardware & Devices and Electronics Theory > Troubleshooting & Designing Networks
Register FAQ Calendar Search Today's Posts Mark Forums Read

 
Thread Tools Display Modes
Old 09-04-2021, 04:27 AM   #1
highland
New Member
 
Join Date: Aug 2020
City & State: London
My Country: UK
I'm a: Knowledge Seeker
Posts: 7
Default Looking for Flash dump from Zyxel devices

Hi all,

I'm looking for flash dumps for my following bricked Zyxel devices;

XMG3927-B50* (also accepted alternatives VMG3927-B50* and VMG8825-B50*)

and also,

VMG3925-B10*

Thanks in advance for all your support.


...
highland is offline   Reply With Quote
Old 09-04-2021, 02:24 PM   #2
stj
Great Sage 齊天大聖
 
stj's Avatar
 
Join Date: Dec 2009
City & State: Europe
My Country: some shithole run by Israeli agents
I'm a: Professional Tech
Posts: 25,275
Default Re: Looking for Flash dump from Zyxel devices

"The Zyxel XMG3927-B Series supports TR-69 that simplifies remote configuration, upgrade and management and therefore improves cost effectiveness and customer satisfaction. Additional support to the latest TR-181 issue-2 data model also enhances service providers’ visibility on subscriber LAN networks"
backdoor infested junk - what isp supplied that unit??
stj is offline   Reply With Quote
Old 09-05-2021, 11:08 AM   #3
highland
New Member
 
Join Date: Aug 2020
City & State: London
My Country: UK
I'm a: Knowledge Seeker
Posts: 7
Default Re: Looking for Flash dump from Zyxel devices

Quote:
Originally Posted by stj View Post
backdoor infested junk - what isp supplied that unit??
From 'Elisa', FIN.
It boots but it can't find config file and reboots. That zcfg_config file is missing. Can't update or upgrade via serial connection either. Perhaps, only option is to get a full flash dump and rewrite the nand.
highland is offline   Reply With Quote
Old 09-05-2021, 12:24 PM   #4
stj
Great Sage 齊天大聖
 
stj's Avatar
 
Join Date: Dec 2009
City & State: Europe
My Country: some shithole run by Israeli agents
I'm a: Professional Tech
Posts: 25,275
Default Re: Looking for Flash dump from Zyxel devices

it probably has a serial port on the board, so you could get in with that.
but you really need to convert it to openWRT or atleast cross-flash it to whatever the model was that was sold direct to the public without isp specific locks in it.
stj is offline   Reply With Quote
Old 09-05-2021, 01:36 PM   #5
highland
New Member
 
Join Date: Aug 2020
City & State: London
My Country: UK
I'm a: Knowledge Seeker
Posts: 7
Default Re: Looking for Flash dump from Zyxel devices

Quote:
Originally Posted by stj View Post
it probably has a serial port on the board, so you could get in with that.
but you really need to convert it to openWRT or atleast cross-flash it to whatever the model was that was sold direct to the public without isp specific locks in it.
I've serial access to the device. The CFE is locked with new algorithm, which is different to known old algorithm. Thus, I can't enable 'BootExtension Debug Flag' to flash vanilla/generic firmware either. I know, some UK ISPs devices are not CFE locked and can be flashed to get rid of ISP traps.
highland is offline   Reply With Quote
Old 09-06-2021, 03:58 AM   #6
stj
Great Sage 齊天大聖
 
stj's Avatar
 
Join Date: Dec 2009
City & State: Europe
My Country: some shithole run by Israeli agents
I'm a: Professional Tech
Posts: 25,275
Default Re: Looking for Flash dump from Zyxel devices

is the flash bga or something socketable?

or is there an identifiable jtag port?
stj is offline   Reply With Quote
Old 09-06-2021, 08:19 AM   #7
highland
New Member
 
Join Date: Aug 2020
City & State: London
My Country: UK
I'm a: Knowledge Seeker
Posts: 7
Default Re: Looking for Flash dump from Zyxel devices

Quote:
Originally Posted by stj View Post
is the flash bga or something socketable?

or is there an identifiable jtag port?
It is ESMT F59L2G81A, TSOP48. I've RT809H to flash the nand.

Not identifiable JTAG port.
highland is offline   Reply With Quote
Old 09-06-2021, 08:52 AM   #8
stj
Great Sage 齊天大聖
 
stj's Avatar
 
Join Date: Dec 2009
City & State: Europe
My Country: some shithole run by Israeli agents
I'm a: Professional Tech
Posts: 25,275
Default Re: Looking for Flash dump from Zyxel devices

o.k. try to find out what other model numbers are the same pcb.
is it marked on the pcb?
stj is offline   Reply With Quote
Old 09-06-2021, 01:35 PM   #9
highland
New Member
 
Join Date: Aug 2020
City & State: London
My Country: UK
I'm a: Knowledge Seeker
Posts: 7
Default Re: Looking for Flash dump from Zyxel devices

Quote:
Originally Posted by stj View Post
o.k. try to find out what other model numbers are the same pcb.
is it marked on the pcb?
Not much idea about which other models share the same pcb, but I was confirmed that vmg3927-B50* and vmg8825-B50* also share the same bootloader as of xmg3927-B50*.
highland is offline   Reply With Quote
Old 09-07-2021, 01:51 PM   #10
SMDFlea
Super Moderator
 
Join Date: Jan 2018
City & State: York
My Country: UK
I'm a: Knowledge Seeker
Posts: 8,004
Default Re: Looking for Flash dump from Zyxel devices

Quote:
Originally Posted by highland View Post
Not much idea about which other models share the same pcb, but I was confirmed that vmg3927-B50* and vmg8825-B50* also share the same bootloader as of xmg3927-B50*.
might help - https://forum.kitz.co.uk/index.php/topic,23648.60.html
SMDFlea is offline   Reply With Quote
Old 09-08-2021, 12:38 AM   #11
highland
New Member
 
Join Date: Aug 2020
City & State: London
My Country: UK
I'm a: Knowledge Seeker
Posts: 7
Default Re: Looking for Flash dump from Zyxel devices

Quote:
Originally Posted by SMDFlea View Post
Thank you for the link. The device's CFE Bootloader is locked thus I can't enable 'BootExtension Debug Flag' to be able to flash via serial/UART connection either. I need to reflash the NAND with an external programmer to unbrick it. I was hoping to get a complete NAND FLASH DUMP from any device similar or same as KCOM.
highland is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



Badcaps.net Technical Forums 2003 - 2021
Powered by vBulletin ®
Copyright ©2000 - 2021, Jelsoft Enterprises Ltd.
All times are GMT -6. The time now is 10:23 PM.
Did you find this forum helpful?