Best Of
Re: LTE5388-M804 loses network after some time
@BruCom @RobTheNetworkGuy @Rabarbaro A few news:
- sys resetcm is interesting as it restarts the LTE module, you might try it next time you face the issue
- cfg cellwan_mapn edit --Index 1 is the fastest way to refresh the LTE connection, it's interesting if it's getting slow for example but won't fix the connection issue
- After my tests, I faced a situation were ifconfig was not showing wwan0 interface anymore and cfg cellwan_status get was telling LTE status Up… neither resetcm and cellwan_mapn were able to restore the missing interface and I has to reboot from the GUI
And now the most interesting part 😀
- sys atcr reboot will revert to default "saved" settings, and those settings are saved in "rom-d" whatever it is: by default these are factory settings
- zycli save_default save will save your current configuration into "rom-d", and at this time you can now use sys atcr reboot to reboot the device without loosing the settings!
- To revert the "rom-d" to default settings if you need to, 1st use zycli save_default clean and the sys atcr reboot
A full expect script is on progress, I need some more tests to finalize it.
Zyxel security advisory for DNS misconfiguration in NBG7510 home router
CVE: CVE-2022-38546
Summary
Zyxel has released a patch addressing a DNS misconfiguration in the NBG7510 home router. Users are advised to install the applicable update for optimal protection.
What is the vulnerability?
A DNS misconfiguration in Zyxel’s NBG7510 could allow an unauthenticated attacker to perform DNS-related attacks, such as DNS tunneling or DNS amplification attacks, by using the open DNS resolver when the device is switched to the AP mode.
What versions are vulnerable—and what should you do?
After a thorough investigation, we’ve identified only one vulnerable product that is within the vulnerability support period and released a firmware patch to address the issue, as shown in the table below.
Affected model |
Affected version |
Patch availability |
|
NBG7510 |
1.00(ABZY.2)C0 and earlier |
V1.00(ABZY.3)C0 |
Got a question?
Please contact your local service rep or visit Zyxel’s Community for further information or assistance.
Acknowledgment
Thanks to Alexander Traud for reporting the issue to us.
Revision history
2022-12-21: Initial release.
Zyxel LTE5398-M904 connected to the cellular network but no Internet access
Dear Zyxel community, greetings from Italy.
I really need your help before to surrender and return the above mentioned device to Amazon.
I like the LTE5398-M904 and would like to keep it but there is an issue should be solved.
The issue is that, with a random frequency, the Internet is not accessible despite the corresponding led is on and green and the web interface shows the cellular WAN is up and running.
Also the ping function in the modem diagnostic menu is not able to access the Internet.
I’ve the logging turned on and these are the few events before the issue occurs:
Mar 12 12:07:24 user.notice RILCMD: cid: 1 cgact_status[0]:1
Mar 12 12:07:29 user.notice RILCMD: Device UP in quectel_eg18_update()
Mar 12 12:07:29 user.notice RILCMD: set_LTE_connection_status: Up
Mar 12 12:07:38 user.notice RILCMD: RILCMD STATE: RS_UPDATE ============> RS_READY
Mar 12 12:07:57 user.warning RILCMD: [LTE Cell info] RFCN:1500, Cell_ID:257687890, PCI:52, RSRP:-74
Mar 12 12:07:57 user.notice RILCMD: [LTE Cell info] RFCN:1500, Cell_ID:257687890, PCI:52, RSRP:-74
Mar 12 12:07:57 user.notice RILCMD: [IP info] IPv4:10.95.144.171
Mar 12 12:07:57 user.notice RILCMD: [IP info] IPv6:
Thank you to anyone can provide a solution.
Re: 2nd ranconware infection in 1 year
Hi @brolysan13
It is generally recommended to reinstall the operating system on any device that has been infected with ransomware. This is because ransomware can be difficult to fully remove, and there may be hidden or residual malware that remains even after the ransomware is removed.
Reinstalling the operating and network system can help ensure that all traces of the ransomware and any other malware have been removed from the device. However, it is important to make sure that you have a backup of any important data before reinstalling the operating system, as the process will erase all data on the device.
For the NAS, once the device gets polluted, please wiped HDDs, factory reset, and readded disks.
You can refer to the article below to enhance your NAS security.
Re: LTE5398-M904 - Switching between internal and external antennas
Hi @BruCom,
from my point of view, the switch button can work both when device is on and off.
Just to insure to connect external antennas when switching to EXT port !
Re: 2nd ranconware infection in 1 year
You have to wiped HDDs, factory reset, readded disks.
VMG3625-T50B Firmware version V550ABTL0b2r
Re: LTE5388-M804 loses network after some time
@RobTheNetworkGuy That makes sense. (1) When IPv6 is disabled, network is lost everytime DHCP changes the IPv4 address, every 12 hours in my case. APN "refresh" is sufficient to restore the conection. (2) When IPv6 is enabled, it seems to work a little better as if the IPv6 stack was detecting the change and update the config of the router including its new IPv4 parameters. However, after a few days (from 1 to 5 days or more), the connection gets lost again and this time APN "refresh" is not enough and a full reboot is required.
I will check cellwan_status next time.
Re: Sandbox false positive .NET 6.0.1 & 7.0.5 Update
The "sometimes" seems such more "every update pulled by Microsoft".
Re: Sandbox false positive .NET 6.0.1 & 7.0.5 Update
The problem is that it will reappear again and again on each MS patchday since the .NET or Windows desktop runtimes change its release numbers (and connected hash values) very often. It is no solution to let the user adding any hash values to the "allow list" subsequently every time.
We encountered this behaviour also for months. Fortunately it's gone with us since we have upgraded from our old USG110 to an USG Flex 700. But other user still report about this issue also with an USG Flex. Don't know what it depends on.