0

I have OUTDOOR WI-FI CPE installed by my ISP for internet connection. Manufacturer: "Telenet systems" Model: "TWI 1040 - PE"

The specification on their website says it supports HTTP web based GUI management.

The ISP probably set it as bridge mode. So if i keep my IP as automatic (DHCP On) i cannot access CPE's configuration page. To solve this i assigned my LAN adapter static ip 192.168.0.x subnetmask 255.255.255.0 gateway 192.168.0.1

Now when i power up the CPE, i can detect the CPE at 192.168.0.254 for few seconds, then again it becomes inaccessible. & IP scanner/Port scanner can not detect it untill i restart CPE.

During the little time window, if i open http://192.168.0.254 i get a login page. the source code is given below.

<html>
<head>
<LINK REL="stylesheet" href="../styleSheet.css" type="text/css">
<script type = "text/javascript">

// Note: Like all Javascript password scripts, this is hopelessly insecure as the user can see 
//the valid usernames/passwords and the redirect url simply with View Source.  
// And the user can obtain another three tries simply by refreshing the page.  
//So do not use for anything serious!

var count = 2;
function showStatus()
{
    var vmesg = document.getElementById('99');
    vmesg.style.visibility="hidden";
    var mesg = vmesg.innerHTML;
    //alert(mesg)
//  mesg = mesg.replace(/(<BR>|<br>)+/g, '');

    mesg = mesg.replace(/(&nbsp;)+/g, '');
    //alert(mesg)   
    mesg = mesg.replace(/(&amp;)+/g, '');
    mesg = mesg.replace(/(nbsp)+/g, '');
    mesg = mesg.replace(/(<BR>|<br>)+/g, '@');
    //mesg = mesg.replace(/(N)+/g, '@');
    //mesg = mesg.replace(/(S)+/g, '@');
    //alert(mesg)
    var iwmesg=mesg.split("@");
//  alert(iwmesg)
    document.getElementById('2').innerHTML=iwmesg[0].split(":")[1];
//  document.getElementById('2').innerHTML=iwmesg[1].split(":")[1];

//  mesg = mesg.replace(/(N)+/g, '@');
    mesg = mesg.replace(/(=)+/g, '@');
//  alert(mesg)
    cwmesg=mesg.split("@");
    var cutcw=cwmesg[3];

    cutcw=cutcw.split("N");
//  document.getElementById('3').innerHTML=cwmesg[3].split("=")[1];
//  alert(cutcw)
    document.getElementById('3').innerHTML=cutcw[0];



    var mode = document.getElementById('16');
    var nmode = mode.innerHTML;
    nmode = nmode.replace(/(<BR>|<br>)+/g, '');
    mode.innerHTML = nmode;

}
function validate() {
var un = document.myform.username.value;
var pw = document.myform.pword.value;
var valid = false;

var unArray = ["root"];  // as many as you like - no comma after final entry
var pwArray = ["5up"];  // the corresponding passwords;

for (var i=0; i <unArray.length; i++) {
if ((un == unArray[i]) && (pw == pwArray[i])) {
valid = true;
break;
}
}

if (valid) {
  //alert ("Login was successful");
  //alert(window.location);
  //window.location = window.location+"/APStatus"
  //var loc = "http://192.168.0.11/login.html";
  var loc = window.location+"";
  var pos = loc.indexOf("cgi-bin");
  var newloc = loc.substr(0,pos)+"cgi-bin/start";
  //alert(newloc);
  window.location = newloc;
  return true;
}

var t = " tries";
if (count == 1) {t = " try"}

if (count >= 1) {
alert ("Invalid username and/or password.  You have " + count + t + " left.");
document.myform.username.value = "";
document.myform.pword.value = "";
setTimeout("document.myform.username.focus()", 25);
setTimeout("document.myform.username.select()", 25);
count --;
}

else {
alert ("Still incorrect! You have no more tries left!");
document.myform.username.value = "No more tries allowed!";
document.myform.pword.value = "";
document.myform.username.disabled = true;
document.myform.pword.disabled = true;
return false;
}

}


</script>
</head><body onload="showStatus()">
<meta http-equiv="refresh" content="20" >
<table id="apStatus" bgcolor="#33aaaa"  cellspacing=1 cellpadding=4>
<tr class="headerBLK2"><td>Station SSID:</td>
<td id="2"></td></tr>
<tr class="headerBLK2"><td>Signal Strength:</td>
<td id="3"></td></tr>
<tr class="headerBLK2"><tr class="headerBLK2"><td>Firmware Version</td>
<td id="16">1.2.8<br><br>&nbsp;&nbsp;&nbsp;<br><br></td></tr>
<tr><td id="9"></td></tr>
<table>

<br><br>
<table align="center">

<form METHOD=POST id="myform" action="start">
<tr>
<td>ENTER USER NAME</td><td> <input type="text" name="username"></td>
</tr><tr>
<td>ENTER PASSWORD</td><td><input type="password" name="pword"></td>
</tr><tr>
<td colspan=2 align="center"><input type="submit" value="LogIn" name="Submit"></td>
</tr>
</form>

</table>
<p hidden="hidden" id="99" class="hide">ath0&nbsp&nbsp&nbsp&nbsp&nbspIEEE802.11g&nbspESSID:"An0kit-ss3ccA-Eth3r_CP3"&nbsp<br><br>&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp&nbspLinkQuality=72/94&nbspSignallevel=-69dBm&nbspNoiselevel=-95dBm<br><br><br><br></p>
<!--p hidden="hidden" id="99" class="hide">ath0&nbsp&nbsp&nbsp&nbsp&nbspIEEE802.11g&nbspESSID:"An0kit-ss3ccA-Eth3r_CP3"&nbsp<br><br>&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp&nbspLinkQuality=85/94&nbspSignallevel=-65dBm&nbspNoiselevel=-95dBm<br><br><br><br></p-->
</body>
<html>

Obviously either the manufacturer has implemented the login page poorly or more likely my ISP has customized firmware of CPE. If i enter username: "root" & password: "5up" i get nothing but the same page.

Why after power up CPE remains accessible for short time only. and is there any method to log into this page.

5
  • Either case is likely. Sadly, with either case, your options are limited. – Ramhound May 26 '15 at 13:05
  • Have you tried calling your ISP? – DavidPostill May 26 '15 at 14:16
  • @DavidPostill I want to tweak settings in CPE which my ISP won't allow me to do by myself. So that is not gonna help. – DrNT007 May 26 '15 at 16:14
  • 1
    Heh, I like the note that the JS dev wrote. :) – Karan May 26 '15 at 19:20
  • Why was this scraped up from the bottomless pit of a database? – Tim_Stewart Oct 2 '20 at 21:13
0

You can find the web login to the router by following way.

  1. Either SSH or telnet to system

    ssh root@192.168.0.254 password: 5up

  2. On prompt go to cd /tmp cat .apcfg

In the file find WUSERNAME=TikonaSUCPE WPASSWORD=***

use these credentials to login to the web

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.