acecilia/OpenWRTInvasion

Cannot connect to router using telnet or SSH on Mi 4A Gigabit Edition

Closed this issue · 3 comments

Router: Mi 4A Gigabit edition.
Firmware version: 3.0.24
Host system: Ubuntu 20.04

tried to use exploit version 0.0.7:
Script runs smoothly, but I cannot connect to router with telnet/SSH

$python3 remote_command_execution_vulnerability.py 
Router IP address [press enter for using the default 192.168.31.1]: 
stok: XXX
****************
router_ip_address: 192.168.31.1
stok: XXX
****************
start uploading config file...
start exec command...
done! Now you can connect to the router using several options: (user: root, password: root)
* telnet 192.168.31.1
* ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 -c 3des-cbc -o UserKnownHostsFile=/dev/null root@192.168.31.1
* ftp: using a program like cyberduck

$telnet 192.168.31.1
Trying 192.168.31.1...
telnet: Unable to connect to remote host: Connection refused

$ ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 -c 3des-cbc -o UserKnownHostsFile=/dev/null root@192.168.31.1
ssh: connect to host 192.168.31.1 port 22: Connection refused

Please read the other issues in the repository, there are many like this. Try to simplify your network configuration

Ok, I've succeed with exploit version 0.0.1.
I believe it would be good to include note about this to documentation.

Doesnt work with my Mi Router 4A gbit edition

Details:
Model: R4A
Production Date: 09/2021
SKU: DVB4224GL
Tried both 0.0.1 and 0.0.2 and latest build
Downgraded firmware from MiWiFi Release 3.0.27 to MiWiFi Release 3.0.24

No luck, telnet doesnt work, neither ssh

Just a comment for who ever comes across this from google.