top of page
Search

Tenda Router Firmware Update Guide: Steps and Tips



1. Only firmware version V12.01.01.X can be upgraded to this firmware.2. Please upgrade your device by cable connections.3.Please unzip the file you downloaded and use the file ended with "bin" or "trx" to upgrade your device.4.Do not power off the device when upgrading.




tenda firmware update




I have a Tenda router, and its current firmware is H1_V3.2.5e-Feb 26 2009. Which version should I upgrade to? Their site warns that selecting the wrong version can damage the router, and even upgrading through WiFi can damage it.


This is a link that lists all the current firmware releases across many types of products supported by Tenda - =11. My firmware is mentioned there. But Tenda's website is not very intuitive, and they don't tell you which version to upgrade to.


You need to find out your correct router model before you do anything, or you might brick it by uploading incompatible firmware. You can find it either on the device (usually printed on the bottom), or by checking information within the web interface. The model number is often listed on a page called "Status" or similar.


I have a tenda a11 AC1200 router, I was trying to update it manually the other day and it was going smoothly, I misclicked on the screen and the progress bar disappeared then my router stopped working.Pretty sure I got the right firmware version from the official site. It currently is shown on my pc as "unidentified network" (it's hooked to my pc through an ethernet cable).I've tried resetting it countless times but I still got nothing. It also won't show up on wireless networks, and I can't get its ip either. The router's LED indicator for "SYS" is stuck on as well as the LAN indicator. Thanks in advanced to those who can help and answer. (Image attached is what the router looks like)


Emulating the AC15 router was a challenging exercise. The firmwarecouldn't be obtained via the standardUART extraction technique that I usually use for most IoT devices.The AC15 doesn't store all its configuration data in thenvram, some of it is in a separate MTD partition. Launchingthe AC15's start up programs caused them to crash and the system toreboot, because certain custom library calls didn't return the valuesthat were expected, due to missing emulated hardware. It took quite abit of reverse engineering to figure out which functions we need to shimusing LD_PRELOAD.


There are three popular techniques for obtaining the firmware. Mypreference is to grab the firmware from the physical router. This way,we can also obtain a snapshot of the configuration stored in itsnvram.


Now that our observations are complete, we can switch fromtenda_hooks_verbose to tenda_hooks, to avoidexcessive output. All we want to verify is the IP address should be setto 192.168.100.2 and that the web server should beaccessible from a browser.


The addresses of libraries such as libc.so.0 and othersin EMUX are slightly different when compared to those on the actualhardware. The reason is because of /lib/libnvram-armx.soand tenda_hooks.so being injected viaLD_PRELOAD.


Extracting the Tenda AC15 Wi-Fi Router's firmware proved to be a challenging task. The UART is set to "view-only", by disabling the RX pin input on the board. Reading the firmware using an SOIC-8 clip and an EEPROM programmer did not work, as the device locked the SPI flash chip after powering on.


After the firmware extraction, you will need to solder the SPI Flash Memory back in its original location on the circuit board. We ended up damaging our circuit board in the process and for now, we have a bricked Tenda AC15 on our hands!


Een router van elektronicafabrikant Tenda is door verschillende kwetsbaarheden, waaronder een hardcoded Telnet-wachtwoord, op afstand over te nemen en een beveiligingsupdate is niet beschikbaar, ook al werd het bedrijf in januari van dit jaar over de problemen geïnformeerd. Dat laat securitybedrijf Independent Security Evaluators weten.


Daarnaast blijkt dat twee parameters direct aan een doSystemCmd-functie worden doorgegeven, waardoor een aanvaller remote commando's op de router kan uitvoeren. Hiervoor moet de webinterface wel toegankelijk zijn. Tenda werd op 17 januari door de onderzoekers over de kwetsbaarheden geïnformeerd, maar gaf geen reactie. De laatste firmware-update voor de AC15 AC1900 dateert van oktober 2019. 2ff7e9595c


 
 
 

Recent Posts

See All

Comments


bottom of page