User:Omega/Broadcom based modem routers
Jump to navigation
Jump to search
Broadcom-based modem/routers
This table lists modem/routers with Broadcom DSL chips, with their default GUI and telnet login details.
| Manufacturer | Model | Chipset | IP address | Login name | Password | 2nd stage login? | Shell command | CLI command prefix |
|---|---|---|---|---|---|---|---|---|
| Actiontec | C1000A | BCM63168 | 192.168.0.1 | No | xdslctl | |||
| C2000A | BCM63168 | 192.168.0.1 | No | xdslctl | ||||
| ASUS | WL-600G | BCM6348 | 192.168.1.1 | admin | admin | No | ||
| Belkin | F1PI243EGau (BoB) |
BCM6362 | 10.1.1.1 | admin (?) | admin | No | ||
| Billion | 7700(N) | BCM6328 | 192.168.1.254 | admin | admin | No | adsl | |
| 7800(N) | BCM6358 | 192.168.1.254 | admin | admin | No | adsl | ||
| 7800DXL | BCM6361 | 192.168.1.254 | admin | admin | No | adsl or xdslctl | ||
| 8800NL | BCM63168 | 192.168.1.254 | admin | admin | No | adsl or xdslctl | ||
| 8900AX | BCM | 192.168.1.254 | admin | admin | No | adsl or xdslctl | ||
| BT Home Hub | 5B (Arcadyan) | BCM63268 | 192.168.1.254 | admin | Locked | Locked | ||
| D-Link | DSL-2300U | BCM6338 | 192.168.1.1 | admin | admin | No | adsl | |
| DSL-2540B | BCM6338 | 192.168.1.1 | admin | admin | No | adsl | ||
| DSL-2542B | BCM6338 | 192.168.1.1 | admin | admin | No | adsl | ||
| DSL-2640B | BCM6348 | 192.168.1.1 | admin | admin | No | adsl | ||
| DSL-2740B | BCM6358 | 192.168.1.1 | admin | admin | No | adsl | ||
| Dynalink | RTA230 | BCM6345 | 192.168.1.1 | admin | admin | No | ||
| RTA1025W | BCM6348 | 192.168.1.1 | admin | admin | No | |||
| RTA1025W rev2 | BCM6348 | 192.168.1.1 | admin | admin | No | |||
| RTA1046VW | BCM6348 | 192.168.1.1 | admin | admin | No | |||
| RTA1320 | BCM6338 | 192.168.1.1 | admin | admin | No | |||
| RTA1335 | BCM6338 | 192.168.1.1 | admin | admin | No | |||
| EE Brightbox | V2 (Arcadyan) | BCM63168 | 192.168.1.1 | admin | Locked | |||
| Free | Freebox V4/V5 | BCM6348 | ||||||
| Freebox V6 | BCM6368 | |||||||
| Huawei | HG610 | BCM6368 | 192.168.1.1 | admin | admin | Yes | sh | xdslcmd |
| HG612 | BCM6368 | 192.168.1.1 | admin | admin | Yes | sh | xdslcmd | |
| HG622 | BCM6368 | 192.168.1.1 | admin | admin | Yes | sh | xdslcmd | |
| HG635 | BCM | 192.168.1.1 | admin | admin | Yes | sh | xdslcmd | |
| HG658b | BCM6368 | 192.168.1.1 | admin | admin | Yes | sh | xdslcmd | |
| Linksys | X3000 | BCM6362 | 192.168.1.1 | admin | admin | No | (No telnet server) | |
| Motorola | NVG510 | BCM6362 | xdslctl (?) | |||||
| Netgear | D6400 | BCM63168 | 192.168.0.1 | admin | password | No | adslctl (?) | |
| D7000 | BCM63138 | 192.168.0.1 | admin | password | No | |||
| DG834(G) v4 | BCM6348 | 192.168.0.1 | admin | password | No | adslctl | ||
| DG834N v1 | BCM6358 | 192.168.0.1 | admin | password | No | adslctl | ||
| DG834GT | BCM6348 | 192.168.0.1 | admin | password | No | adslctl | ||
| DG834PN | BCM6348 | 192.168.0.1 | admin | password | No | adslctl | ||
| DGN2000 | BCM6348 | 192.168.0.1 | admin | password | No | adslctl | ||
| DGN2200 | BCM6358 | 192.168.0.1 | admin | password | No | adslctl | ||
| DGND3300 v1 | BCM6358 | 192.168.0.1 | admin | password | No | adslctl (?) | ||
| DGND3300 v2 | BCM6358 (?) | 192.168.0.1 | admin | password | No | adslctl (?) | ||
| DGND3700 v1 | BCM6368 | 192.168.0.1 | admin | password | No | adslctl (?) | ||
| DGND3700 v2 | BCM6361 | 192.168.0.1 | admin | password | No | adslctl (?) | ||
| DM111P | BCM6348 | 192.168.0.1 | admin | password | No | adslctl | ||
| Sagemcom | F@ST2504N | BCM6362 | 192.168.0.1 | admin (web UI login, no telnet) |
sky (web UI login, no telnet) |
No | adsl | |
| F@ST2504 | BCM6348 | 192.168.0.1 | admin | sky | No | adslctl | ||
| Sky | SR101 | BCM6362 | 192.168.0.1 | admin | sky | |||
| Thomson / Speedtouch |
ST536 | BCM6338 | 192.168.1.254 | Administrator | (none) | No | (custom CLI) | |
| ST546 | BCM6338 | 192.168.1.254 | Administrator | (none) | No | (custom CLI) | ||
| ST585 v6 | BCM6348 | 192.168.1.254 | Administrator | (none) | No | (custom CLI) | ||
| ST585 v7 | BCM6338 | 192.168.1.254 | Administrator | (none) | No | (custom CLI) | ||
| ST608WL | BCM | 192.168.1.254 | Administrator | (none) | No | (custom CLI) | ||
| ST708WL | BCM | 192.168.1.254 | Administrator | (none) | No | (custom CLI) | ||
| ST780WL | BCM6348 | 192.168.1.254 | Administrator | (none) | No | (custom CLI) | ||
| Thomson / Technicolor |
TG582N | BCM6328 | 192.168.1.254 | Administrator | 1 | No | (custom CLI) | |
| TG585 v7 | BCM6338 | 192.168.1.254 | Administrator | 1 | No | (custom CLI) | ||
| TG589VN v3 | BCM6368 | 192.168.1.254 | Administrator | 1 | No | (custom CLI) | ||
| TG784 | BCM6358 | 192.168.1.254 | Administrator | 1 | No | (custom CLI) | ||
| TP-LINK | Archer VR900 v1 | BCM63168 | 192.168.1.1 | admin | No | locked | Limited custom CLI | |
| Archer VR900 v2 | BCM63137 | 192.168.1.1 | admin | No | locked | Limited custom CLI | ||
| TD-W8960N | BCM6358 | 192.168.1.1 | admin | admin | No | |||
| ZTE | ZXDSL931 vII | BCM6368 | 192.168.1.254 | admin | (per device) | Yes 2 | 2 | xdslctl |
| Zoom | X7n | BCM | 192.168.1.1 | admin | zoomadsl | |||
| ZyXEL | C1000Z | BCM | 192.168.0.1 | No | xdslctl | |||
| P-870HN-51b | BCM6368 | 192.168.1.1 | admin | 1234 | No | adsl (?) | ||
| SBG3300-N | BCM6368 | 192.168.1.1 | admin | 1234 | No | adsl | ||
| VMG1312-B10A | BCM6368 | 192.168.1.1 | admin | 1234 | No | adsl | ||
| VMG1312-B10D | BCM63381 | 192.168.1.1 | admin | 1234 | No | xdslctl | ||
| VMG8324-B10A | BCM63168 | 192.168.1.1 | admin | 1234 | No | adsl |
1 The password for Technicolor routers may be the serial number.
2 The ZTE ZXSDL931vII has additional stages to reach the Busybox shell:
- Second stage command: enable, password = zte
- Third stage command: shell
- After entering shell you have to login - Login: root, Password: root
ADSL/VDSL Modem Routers
*Adtran :hiX 5625 (IUVDSL:48:SVM:F) - Broadcom BCM65238 :hiX 5625 (IUVDSL:48:VME:B) - Broadcom BCM65040V :hiX 5625 (IUVDSL:48:VME:B) - Broadcom BCM65300 :Total Access 5000 (VDSL2 48-Port) - Broadcom BCM65300 *Alcatel-Lucent :ASAM 7300 UD (ABLT-B/D/F) - Broadcom BCM6411/BCM6421 :ISAM 7330 XD (EBLT-C/E/Q) - Broadcom BCM6411/BCM6421 :ISAM 7330 XD (EVLT-K/N) - Broadcom BCM6510(17f)/BCM6511 ...
