Sponsored Links

ZTE MC888 expriments

This is an example of extended info:

1705956617178.webp


As you can see additional CA bands (in this case B3) report SINR, RSRQ and RSRP
 
i'll send back this router.
Got a 888D from Austria, let's see if it can be dumped or not

Keep you updated :)
 
ops..

Code:
BD_ATMC888DV1.0.0B06
MC888
MC888HWV1.0.0
ZTE CORPORATION
ZTE_AT_MC888DV1.0.0B06
2023-08-29 16:39:12:237 +0800

Next ones are 888Ultra and 889 :)
 
got access also on the Ultra:

Code:
CR_VDFITMC888ULTRAV1.0.0B04
MC888 Ultra
Ver.AT1
ZTE CORPORATION
VDF_IT_MC888ULTRAV1.0.0B08
2023-06-15 10:13:12:235 +0800

Anyway, it's write-protected so no mods on it (until i find the command to unlock flash)

Bad news: all newer ZTE devices have locked bootloader and secboot enable :(
 
My trick works also on MC889

Code:
BD_ATMC889V1.0.0B08
MC889
MC889_HW1.0
ZTE CORPORATION
H3A_AUT_MC889V1.0.0B08
2023-06-17 08:12:58:638 +0800

Also this unit has locked bootloader. Anyway i've found how to remove write protection before mounting the filesystem. So mods on running fw can be done (like add ssh, telnet, rework webui) :)

Big issue will remain in case of firmware swap for locked bootloader, so no way to write in "fastboot" mode. Only EDL can be possible if a loader will appear, but i think it will take a lot of time :)

Happy hacking to anyone!
 
Last edited:
another tips for everyone who is curious:

the "Pro" version of MC888 and the MC8020 are essentialy an SDX55/62 connected over USB to an IPQ5018 router that is running custom OpenWRT

When OpenWRT will support IPQ5018 platforum (that is currently possible with other forks) these units will be very interested :)

A the moment, only 888Ultra, that is like other standard unit (all stuff is managed by SDX platform) has one port a 2.5Gbit/s
 
Last edited:
Sponsored Links
Apologies for not fully following what are you saying is possible to do with these ZTE 888/889 devices?

I was considering an 889 for a while if one popped up somewhere for a reasonable price. I understand it has a 2.5Gbps (PoE) port
 
As is you can just enable ADB and make mods on current firmware (add Telnet, ssh, crond and so on), fix web ui issue or add missing pages like extended network info or tooltip
 
Try a test on MC888A Ultra, and the tricks didn’t work.

I’ll try to understand if that unit is a normal SDX full or and Hybird. From the first photos isn’t clear
 
just for reference I got a dump of MC888 (not D or A) from Poland, here is the info:


Code:
----------------------- ZTE FIRMWARE INFO ------------------------
FW Version: BD_PLKPLMC888V1.0.0B04
HW Name: MC888
HW Vers: MC888HWV1.0.0
Customer Vers: PLK_PL_MC888V1.0.0B04
Build Date: 2023-03-07 15:42:01
------------------------------------------------------------------

This version seems to support extendend network info. So with small works, Livewire UK can be at 99% be reflashed using this version :)
 
Any way I can unloack bands which miss in my cirppled Three MC888. Was so stupid to buy one used in UK instead of in my homecountry Austria while visiting last weekend as it was more convenient to buy in UK vs Austria...

Or update firmware?

small band selection on 5G (missing notably N75 plus N7,N8,N20,N38,N40 and for 4G missing 40,42,43 which are present on other UK or Austrian units, eg UK from "Live")

HW version: MC888HWV1.0.0
Web version: WEB_H3GUKMC888V1.0.0B01
WA INNER version: BD_H3GUKMC888V1.0.0B02
1708416297835.webp
 
Sponsored Links
Hmm, I cannot find the mc888 via adb devices command after connecting with usb.
I tried to follow the tutorial for scat on windows, but I get stuck installing the USB Inf creator - as it cannot find the USB device either.

Guess I would need a linux PC (I use Linux a lot, but only on servers)
 
adb is not enabled by default..
you need to switch the unit to diag mode, then you can dump with scat

send me a PM, i can help you :)
 
Sponsored Links
@stich86
How did you access into shell ?
I use the Polish version:

HW version:MC888HWV1.0.0
WEB version:WEB_TMOPLMC888V1.0.0B03
WA INNER version:BD_STDMC888V1.0.0B04
 
I've my "way" to enable adb mode on the unit
but I will no share at this time, it's so much important and i don't want that ZTE close it :)
 
Just another "recent" info..
Looks like MC888A (and also 888A Ultra) are X65 and not X62 :)

X62 known models are:

- MC888
- MC888D
- MC888Pro (thx to my polish friend smereka, more pics here)
- MC888Ultra for Vodafone (also called GigaCube)

X65 known models are:

- MC888A for A1 Austria
- MC888A Ultra for STC (Arabian Telco company)
 
Last edited:
Just another "recent" info..
Looks like MC888A (and also 888A Ultra) are X65 and not X62 :)

X62 known models are:

- MC888
- MC888D
- MC888Ultra for Vodafone (also called GigaCube)

X65 known models are:

- MC888A for A1 Austria
- MC888A Ultra for STC (Arabian Telco company)
X65 known models added:
- MC888A for AU Japan, called ZTR02
come from lteforum.at.
Sincere waiting for your reply.
 
Top
Cheap BIG ISPs for 100Mbps+
Community Fibre UK ISP Logo
150Mbps
Gift: None
Virgin Media UK ISP Logo
Virgin Media £22.99
132Mbps
Gift: None
Vodafone UK ISP Logo
Vodafone £24.00 - 26.00
150Mbps
Gift: None
NOW UK ISP Logo
NOW £24.00
100Mbps
Gift: None
Plusnet UK ISP Logo
Plusnet £25.99
145Mbps
Gift: £50 Reward Card
Large Availability | View All
Cheapest ISPs for 100Mbps+
Gigaclear UK ISP Logo
Gigaclear £17.00
200Mbps
Gift: None
Community Fibre UK ISP Logo
150Mbps
Gift: None
Virgin Media UK ISP Logo
Virgin Media £22.99
132Mbps
Gift: None
Hey! Broadband UK ISP Logo
150Mbps
Gift: None
Youfibre UK ISP Logo
Youfibre £23.99
150Mbps
Gift: None
Large Availability | View All
Sponsored Links
The Top 15 Category Tags
  1. FTTP (6027)
  2. BT (3639)
  3. Politics (2721)
  4. Business (2440)
  5. Openreach (2405)
  6. Building Digital UK (2330)
  7. Mobile Broadband (2146)
  8. FTTC (2083)
  9. Statistics (1901)
  10. 4G (1816)
  11. Virgin Media (1764)
  12. Ofcom Regulation (1582)
  13. Fibre Optic (1467)
  14. Wireless Internet (1462)
  15. 5G (1407)
Sponsored

Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms  ,  Privacy and Cookie Policy  ,  Links  ,  Website Rules