News for hackers. Stuff that matters.

A comment on Code execution as root via AT commands on the Quectel EG25-G modem (2021).

Re:Code execution as root via AT commands on the Quectel EG2... by kop316 on Friday February 11, 2022 @09:28AM (#30301837)
Thankfully, the Pinephone community has stepped up and made a FOSS firmware (mainly biktorgi, thank you!):

https://github.com/Biktorgj/pinephone_modem_sdk/releases

It still uses the ADSP from Quectel, but from my usage (and from other's reports), it is FAR more stable than the stock firmware. It is also immune to this vunerability (I don't even think it has atfwd_daemon).

[ Parent | on HN ]
Re:Code execution as root via AT commands on the Quectel EG2... by pabs3 on Saturday February 12, 2022 @09:47PM (#30318648)
Would it be feasible to power off the ARM core on the modem and do everything from the main PinePhone ARM SoC?
[ Parent | on HN ]
Re:Code execution as root via AT commands on the Quectel EG2... by kop316 on Monday February 14, 2022 @07:46PM (#30340951)
I think the ARM core on that is pretty weak even compared to the A64 (and certainly compared to the RK3399 of the PPP!). So while possible, I think it is pretty infeasible. That and I think everything is wired to the main CPU anyways.
[ Parent | on HN ]
Re:Code execution as root via AT commands on the Quectel EG2... by pabs3 on Saturday February 12, 2022 @09:47PM (#30318645)
How feature complete is it compared to the proprietary firmware?
[ Parent | on HN ]
Re:Code execution as root via AT commands on the Quectel EG2... by kop316 on Monday February 14, 2022 @07:46PM (#30340953)
Just as feature complete.
[ Parent | on HN ]
Re:Code execution as root via AT commands on the Quectel EG2... by pabs3 on Saturday February 12, 2022 @09:48PM (#30318653)
Has anyone looked at the ADSP firmware part of the modem?
[ Parent | on HN ]
Re:Code execution as root via AT commands on the Quectel EG2... by kop316 on Monday February 14, 2022 @07:47PM (#30340967)
Aside from clean room reverse engineering, I do not think there is anyway to actually replace that. One can wipe and reformat the ADSP, but to my knowledge, if the source code is out there, it is certainly leaed proprietary source code.
[ Parent | on HN ]