Project

General

Profile

Actions
Copy link

Feature #4790

open

Vodafone HSPA+ femtocell availiable in Deutschland

Added by copslock over 3 years ago. Updated about 2 months ago.

Status:
New
Priority:
Low
Assignee:
-
Target version:
-
Start date:
10/09/2020
Due date:
% Done:

0%

Spec Reference:

Description

Seems like the Vodafone femtocell 3802V widely availiable on ebay sites recently,it's based on broadcom solution and runs on the Standard Iuh interface,better alternative choice than expensive Erricson smallcells

Files

6402_page-0001.jpg View 6402_page-0001.jpg 438 KB copslock, 12/01/2020 06:05 AM
6402_page-0002.jpg View 6402_page-0002.jpg 567 KB copslock, 12/01/2020 06:05 AM
Flyer_Sure_Signal_121011.pdf View Flyer_Sure_Signal_121011.pdf 3.11 MB copslock, 01/03/2021 12:53 PM
Vodafone_Flyer_SuperSignal.pdf View Vodafone_Flyer_SuperSignal.pdf 251 KB copslock, 01/03/2021 12:53 PM
Flyer_Super_Signal.pdf View Flyer_Super_Signal.pdf 877 KB copslock, 01/03/2021 12:55 PM
1207358_voda_Anleitung_SuperSignal_2820V.pdf View 1207358_voda_Anleitung_SuperSignal_2820V.pdf 481 KB copslock, 01/03/2021 12:58 PM
SuperSignal_Anleitung_2820V_16Seiter_77_506_711_DRuckdaten.pdf View SuperSignal_Anleitung_2820V_16Seiter_77_506_711_DRuckdaten.pdf 4.93 MB copslock, 01/03/2021 01:02 PM
1207403_Flyer_A4_Super_Signal_SoHO.pdf View 1207403_Flyer_A4_Super_Signal_SoHO.pdf 990 KB copslock, 01/03/2021 01:02 PM
AP2820_top.JPG View AP2820_top.JPG 962 KB Jarobar, 02/23/2021 06:11 PM
AP2820_bot.JPG View AP2820_bot.JPG 1000 KB Jarobar, 02/23/2021 06:11 PM
H27U1G8F2BTR_AP2820_1_p.bin.gzaa H27U1G8F2BTR_AP2820_1_p.bin.gzaa 38.1 MB Jarobar, 02/23/2021 06:12 PM
H27U1G8F2BTR_AP2820_1_p.bin.gzab H27U1G8F2BTR_AP2820_1_p.bin.gzab 2.04 MB Jarobar, 02/23/2021 06:12 PM
EP3802V_top.JPG View EP3802V_top.JPG 1.27 MB Jarobar, 09/21/2021 12:43 PM
EP3802V_bot.JPG View EP3802V_bot.JPG 1.15 MB Jarobar, 09/21/2021 12:43 PM
JS28F128M29EWH_EP3802V_1_p.bin.gz JS28F128M29EWH_EP3802V_1_p.bin.gz 1.62 MB Jarobar, 09/23/2021 09:34 PM
Actions
Copy link
 #2

Updated by lynxis over 3 years ago

do you got the iuh connecting to an ip

Actions
Copy link
 #3

Updated by copslock over 3 years ago

lynxis wrote:

do you got the iuh connecting to an ip

If you know lite about Huawei femtocells,i dont recommend you buy this device,this topic,especially for notice Harald as he lives in Deutschland

Actions
Copy link
 #4

Updated by Jarobar over 3 years ago

If you know lite about Huawei femtocells,i dont recommend you buy this device,this topic,especially for notice Harald as he lives in Deutschland

Could you please provide more details on why not to buy it? Are they technical, legal, other reasons? Does it only apply to Huawei?

Actions
Copy link
 #5

Updated by copslock over 3 years ago

Jarobar wrote:

If you know lite about Huawei femtocells,i dont recommend you buy this device,this topic,especially for notice Harald as he lives in Deutschland

Could you please provide more details on why not to buy it? Are they technical, legal, other reasons? Does it only apply to Huawei?

Nope,mainly because at least I can't get access to the operating system,It might need some higher exploit PWN skills to get access to the Huawei smallcell's operating system.The end-of-life devices?come on,unless somebody reuse them,they will just become useless e-waste in trush bin,no one cares about that.Harald had played around with these end-of-life devices for quite a long while,from the Siemense BS-11 to ip.access ones,even the recently LTE Ericcson RBS 6402 smallcells.The exploits are mainly complished by his friend Spaar,which is not availiable to the community.I think Spaar might have some idea to deal with Huawei devices as he mentioned he had got access to Huawei device before.But for you,I don't think it's a good idea if you don't got enough reverse enginnering and exploit knowledge. The AT&T's microcell is so far the best one to pair with OSMOHNBGW,because it's easy to get access to its operating system.

Actions
Copy link
 #8

Updated by Jarobar about 3 years ago

Three images for AP2820 are here. The main chip is BCM61610KFB1G, trx MAX2550. There is AR8236 on the second board with the power supply.

Actions
Copy link
 #9

Updated by copslock about 3 years ago

Jarobar wrote:

Three images for AP2820 are here. The main chip is BCM61610KFB1G, trx MAX2550. There is AR8236 on the second board with the power supply.

copslock: Maybe is it time to establish an email connection?

send mail address to ,I will reply with you

Actions
Copy link
 #10

Updated by Jarobar over 2 years ago

Two images for Vodafone femtocell 3802V. The main chip is BCM61670IFBG, trx AD80276BBCZ, FPGA Lattice ECP3, flash1 MT29F4G08ABADAH4, flash2 JS28F128.

Actions
Copy link
 #11

Updated by copslock over 2 years ago

Jarobar wrote:

Two images for Vodafone femtocell 3802V. The main chip is BCM61670IFBG, trx AD80276BBCZ, FPGA Lattice ECP3, flash1 MT29F4G08ABADAH4, flash2 JS28F128.

Looks like Broadcom is really the winner,but I think this one will be very hard to get inside.We have to find some exploit

Actions
Copy link
 #12

Updated by Jarobar over 2 years ago

Third image for EP3802V. The last one is difficult due to the package.

Actions
Copy link
 #13

Updated by copslock over 2 years ago

Jarobar wrote:

Third image for EP3802V. The last one is difficult due to the package.

we need to fly-wire to dump the eMMC,it's destructive,not recommend

Actions
Copy link
 #16

Updated by laforge about 2 months ago

would be great to get all this content converted into a wiki page below Femtocell-specific_information ]]

Actions
Copy link

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 48.8 MB)