Wireless Joint

what bands are you wanting on it?

If your 6500 is on 12.01 or above then no, it is now fuzed and you cannot even downgrade it with earlier versions of 6500 firmware. enabling bands yes you can still do to it.
there is no public release or leak of mr6150 firm or at least that I know of you will have to make your own.

@jimhelms test

Yes of course, I replied to your msg already

Hi yes of course, the OTA updates in these devices are sub-standard, I think the success rate is less than 90% which is way below industry standards, Anyway, yes I can fix/reload it for you.

Rich had said that it appears the mtd29 partition image appeared to mostly contain null characters. Apparently, it wasn't extracted properly. I have no understanding of such things, but maybe Rich can say something about it. This applied to both the mtd files from the EU model and the TLAUS model. ...

I have a friend who use to take the layout from another device, cut it to length if needed and put it onto a broken off layout like that one you have, he was good at micro welding also, much better than I am. He had to remove the cage most of the time I think then re-attach it, it was alot of work b...

The one in the pic looks to be broken off, it happens. I dont have a mr2100 here to look at but I have about a thousand other devices and all of them have 6 tabs.

That one is just like the fg and fx uscellular models, I can make firmware for it that is not so restrictive, msg me about it.

I made a file to downgrade these devices, mr6500, 6400, 6150, 1100, 5100, 5200 and soon 6550 This should restore the ability to use OpenMEP back to the device and for the devices that now have port 5510 closed This will reopen it for you making your device accessible again. I need some testers to te...

I see, ok so if you are not familiar with the things I wrote about in my previous post, you would be much better off if you are just needing to change some images to make your project on a live filesystem and not fool with all the work of the previously mentioned method

more info is needed for a proper answer such as, which part of the firmware, this devices firmware has 31 partitions some being mbn, some img, and some triple layered ubi, ( ubi over ubifs over mtd) but if you mean like a one click tool or something the answer is no, you have to dump then decompile ...

sure, msg me on skype or google chat and tell me what exactly you need.

This is just a guess I do not have this modem or that firmware to know but modems/firms have a list of CA and single bands that are approved or written into the firmware so on most of them you need to either stay within those parameters or modify those files and make them match their config file the...

I would suggest that you dmesg it so you can see what going on with it. Somewhere in this forum I made and posted a simple dmesg tool search it and use it to get a thorough log and then parse it, your answer may be in there. That tool works thru the ADB port so you will have to have the ports enable...

Ok lets see if we can enable the ports again on it, you will need Flexihub on a Windows PC and don't bother to register an account I will send you a token to log in with. We will need somewhere to txt in realtime so I can instruct you my skype and my email which we can use for google chat are on my ...

If you have telnet then I can get you to fastboot mode which means remote loading is possible, thus downgrading is possible. edit: let me be more clear... do you have root or just telnet? if you have $ or # that is good it is root, if you have only AT commands via telnet with no AT!OPENMEP? working ...

Ok thanks so let me ask you this what ports does your device give you when it is in a Windows environment? This would be easily done remotely by loading my Ubi's if you can find your way to fastboot mode, or if it has an ADB port which I am sure it does not in its current state and with no openmep i...

some people pm and ask so I will answer globally here. as of right now, I have not made any modifications other than enabled ports, working openmep & openlock querys to this firmware, I do have it broken down to its root folder and I will be "playing" with it at some point but have not...

The file did not have the needed components to be able to put together a recovery file, it needs to come from another working mr2100
If I get the needed files I will post a recovery file here to share with everyone for this one.

Your 6500 build (or even 6550 build, should that ever develop) sound intriguing; I am interested (and will reach out via PM). Does your 6500 build block additional FW updates? Thanks. No but thats easy to turn off. ? I reference a reddit post where I saw a user say that mmWave functionality was los...

my build is based off of 10.04.22.01 and I took it from MR6500-1A1NAS it has all ports enabled and openmep and openlock enabled that does not mean it will load on your device but since Iknow you have a way back if it does not we can try to load it and see how you get along with it. 1A1NAS firm.PNG y...

I made an spk for this device last week and have only used it one time, if your device was updated to the current version it may have trouble being downgraded as I believe it is fuzed now, not positive as I do not have this device only have worked on a couple of them like this remotely. If I ever ge...

Hogwild wrote: ↑Sat Aug 19, 2023 11:00 am Yeah, that's the same boat I'm in. That why I'm hoping someone will manage to do something with the info. I posted in another thread and the partition image files that exist.

where is the thread, ill try to make a recovery file for you.

Yes I got it for mr5200 thanks, I am needing/looking for the same file from a mr6500 now

Hi this is thread for m1, Perhaps you should make a thread for the m2 and this topic?
If it is unlocked sounds like you may need to check the apn.

you have to have the original imei on it or the unlock wont work so put the imei from the sticker back on it then submit it
or mesg me and ill help you do it.

I need some files from a MR5200 if someone is willing to pull them and send them to me, pls msg me thanks.

I msg'd you about it.

its a press-on cover you can pry it up gently with a plastic pry tool or small flat screwdriver and it will pop off. be careful not to damage the board or other components

Nice micro work, very clean, you obviously have done it alot and are good at it

Yes, ground to chassis and plug the USB in and it will get you to 9008 mode so you can revive a dead or half-dead board. 9008 can be reached by a working board thru the command line so no need to even disassemble it for that on this one because of this it seems to me that attaching a reed or switch ...

This will get a dead mr1100 board back to emergency mode (9008)

mr1100-att-testpoint.jpg

Someone is going to have to donate a verizon variant first, I have not even seen one of them yet, right now they are just a rumor, the fg2000e might do the job but not sure I have not seen that one yet either

sounds like you need to load a full firmware back to it, I assume you are loading spk files? they are not full firmware think of them as more of an update file. someone may have loaded some files from another device to it, maybe the nv perhaps, this would explain the wifi not working as it depends o...

https://wirelessjoint.com/viewtopic.php?t=2696

You either need to send them thru the modem port if you have it enabled or the telnet port @192.168.1.1:5510

@ jericsmith I will answer your dm here, thanks for the info, I do not need anything else from it, it's not my kind of device I won't be getting one to fool with. I did have a look at the firmware it has a Qualcomm,cpr3-ipq807x CPU, and the image is a double stacked ubi based on openwrt, not my kind...

treat it like it was sdx55 then it can work if it is not updated to the latest version, if it is you have to downgrade it before it will work.

What processor/cpu is inside this model?
Specs on the web for are only showing clock speed but no specific cpu label

No not any m6, they are near impossible to find in any quantity, look on ebay

oh I see, people do love to "fiddle" with these devices lol

These are not open source devices and they usually keep the firms pretty well hidden and dont release them to the public
Is yours having problems or something?

Yes it is possible but you have to enable the ports first so further work can be done to it, I did it by making modified firmware
with the ports enabled on it, maybe you can find an easier way or do the same

Netgear LM1200 A quectel modem with a qualcomm MDM9607 chip IMEI, bands, MEID, pESN, FID and TTL are mod-able on it once you have root it is de/re-brandable and pretty much anything can be modded that it does. it has an android/linux os on one side and os2 on a triple stacked ubi over ubifs over mtd...

FX2000 / FX2000-3 This is the downsized version of the fg2000 is a lot easier to work on than the fg, for one it does not need to be disassembled to find bootloader/fastboot mode,. I have 2 of these both are the fx2000-3 variant so all the info below in this post is based on that model. I was able t...

Hello ver:3 That is the response from the nand on the device. You need to make a chip config file for the specific nand and chipset of the device and name it something like chipset.config or similar, your code needs to refer to it as whatever you named it it needs to contain items such as udflag, t...

To go straight to 9008 mode you have to use the testpoint on the board or so you dont have to take it apart you can go to download mode (900E) first then from there you can go to 9008 by 2 commands, so send hello,
then the first cmd is "m 193d100 1" second is "d 7980000 4"

dd is not a suitable method to get a working/reloadable image, see my post below about it (#142) https://forum.xda-developers.com/t/verizon-mifi-8800l-hot-spot-mods-hacking.4323669/page-8 and the loader you have will not work, you need a patched loader for this device or the bootloader will not acce...

Hi you will never get it done like that, fdt is for flashing factory files, such as .spk files which you will not be able to make. You need to use a proper loader and dump from 0 to 7ff then re sum it if needed and make it loadable, then you can write it back to the other one. "firmware" g...

Well the first thing you need to do is to enable the comports so further work can be done to it, I did this by making modified firmware for it with the comports enabled, maybe you can find another way or do the same

I can tell you it would have been the imei and ttl that got it working on vzw

all bands are enabled by firmware already so unless yours has had the bands locked to specific bands then all the bands it can see are enabled by default. You can see below the bands by sku (taken from the netgear webpage) bands.PNG Edit: despite what that says it works fine on verizon with some mods.

Has anyone tried this with the fx2000? I am trying to work on my FX 2000 and change the TTL. If anyone has any suggestions please reach out to me. For the fx like the other newer inseegos you also have to enable the ports first before any other work can be done to it, this is why it needs modified ...

here is from a m5 it should be similar C:\Users\Rich I9 gigabyte\Documents\sierra\nighthawk 2\adb>adb shell * daemon not running; starting now at tcp:5037 * daemon started successfully / # dx fota [FotaState] - 1 [FotaDownlProg] - 0 [FotaAllowResponse] - 0 [FotaUserResponse] - [FotaPostponeTime] - 1...

Yes there is

skype is good so we can text live my skype is
live:kcphonestores_1

AT+CFUN=1,1 (the second 1 means reset) AT!GRESET likely neither will change those modem values you set with dx as the original values are not backed up which means the ones you wrote stick. Always make a backup before you test anything. you may need to reload the modem partition if you cant write ba...

A place to find it, no, inseego keeps firmware tightly under lock and key

Those external ports only support B42, B48, and n78 if you need them to support other bands you will have to modify them like others have done in this thread

ok here u go.

M2100.rar

You wiped it thru FB so you need an mbn or what exactly are you asking for to restore it?

Yes, that can be done, but, this model is more work than any of the others, and is slower than the others, you really would be better off getting a m2000 and having it flashed, those m2000's after flashing and dethrottle run for most people at 700mbps or higher, a lot of peeps see closer to a gig of...

Yes, I can help you to recover it, however, this is not my personal sales thread.
look here for that ---->viewtopic.php?p=26991#p26991

I was just wondering if, when Verizon/Visible networks are negotiating a cellular connection with the device, the fact that OTA check is off on the device might keep the Verizon/Visible networks from moving forward with the successful cellular connection negotiation. Thoughts? definitely not Also, ...

well you prob need to make it look like a tablet then to the carrier, and most of the 5g bands/configs use the lte bands, however sierra devices have alot of control files for data and especially 5g sierra makes these devices very controllable for the carriers they sell them to to get the most out o...

I will not be giving my builds for this model away, as for your other question why dont you be more specific as to what you are trying to modify or what the end result you want is, just saying "modify the firmware" could mean a million things and maybe we can help you get it done.

ota is controlled by the nv in most devices, sierra devices also have fota rules and config in the filesystem, but to start you can look at the nv items 260,5037 & 5042 they are ota controllers. You should always make a backup before as you say ( not leave well enough alone ) so you can get back...

There is a trojan in this file - https://www.virustotal.com/gui/file/d44db61a7987e617283cc711c8bb0fe03286236ce948c250951701a7bc4a0e5f Do not download it or install it. OMG really dude? That is a false positive and it is because there is a batch script in the file, I made this tool and there is no v...

If you have the uscell variant it can see
Radio Bands: n1/ n2/ n3/ n5/ n7/ n12/ n20/ n25/ n28/ n38/ n40/ n41/ n46/ n48/ n66/ n71/ n77/ n78, B1/ B2/ B3/ B4/ B5/ B7/ B8/ B12/ B13/ B14/ B17/ B20/ B25/ B26/ B28/ B29/ B30/ B32/ B38/ B39/ B40/ B41/ B42/ B46/ B48/ B49/ B66/ B71

For MR6450 you will have to look around for it, I do not have it for 6450.

No, you need to load firmware version 10.01.41.02 or earlier before the openlock challenge can work

it needs to be downgraded, see my post below

viewtopic.php?t=3654

I dont use the ext antenna ports but its pretty straightforward, just re-route the wires from the ext ports to the proper place on the board for the band you want, if you do not know which one it is use the fcc docs it will show you the antenna info/location you need. if the wires are not long enoug...

I assume you are meaning in edl, if you are then Just treat it like an M5 and it will work

If you mean load your device with it yes but tell me what you are trying to do please, if you can be more specific than "its not getting into the system" it might be that it is needing something else besides a reload.

Search found 552 matches