Netgear WG102
Netgear WG102
Manuf (OEM/ODM): SerComm
FCC approval date: 05 November 2004
Country of manuf.: China
Type: access point
FCC ID: PY3WG102
IC ID: 4054A-WG102
Power: 12 VDC, 1.2 A
Connector type: barrel
PoE tag: 802.3af, standard
CPU1: Atheros AR2313A (180 MHz)
FLA1: 4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br /> (Macronix MX29LV320MBTC-90G)
RAM1: 16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br /> (EtronTech EM639165TS-6G)
Expansion IFs: none specified
JTAG: yes
Serial: yes, 3.3V TTL
WI1 chip1: Atheros AR2313A
WI1 chip2: Atheros AR2112A
WI1 802dot11 protocols: bg
WI1 antenna connector: RP-SMA
ETH chip1: Atheros AR2313A
ETH chip2: Realtek RTL8201CP
LAN speed: 100M
LAN ports: 1
bg
Stock FW OS: VxWorks
Default IP address: 192.168.0.229
the IP 192.168.0.229 is used by 1 additional devices
of which 1 are Netgear devices
Default login user: admin
Default login password: password
admin:password credentials used by 423 additional devices
of which 304 are Netgear devices
For a list of all currently documented Atheros (QCA) chipsets with specifications, see Atheros.
ProSafe 802.11g Wireless Access Point
• Support page
Hacking the Netgear WG102 Access Point
On the SOWN Wiki
The test report states the hardware as 4900D00B which would strongly indicate that the device was manufactured by SerComm.
Aditional information:
- MX29LV320MBTC-90G can operate in 8 and 16 bit mode and support CFI protocol. On this board it is atached over 8bit bus. In this canse, for example for jtag, it should be specially configured. In openocd use x16_as_x8 option:
flash bank someflash cfi 0xbe000000 0x00400000 1 1 ar231x.cpu x16_as_x8
- Processord ID: 0x0001800a (MIPS 4Kc)
- All firmware versions are based on VxWorks 5.4.2
Firmware
- no obfuscation.
- zlib compression.
0000000: 4148 3030 4ab0 5dbf 0012 4d34 db2c 1c95 AH00J.]...M4.,..
0000010: 986d ccc8 dc05 90ac 56b0 f349 0001 0074 .m......V..I...t
0000020: 3030 3031 3030 3030 3035 3130 3434 3030 0001000005104400
0000030: 3031 3031 3030 3030 3030 3030 3030 3030 0101000000000000
0000040: 3030 3030 3030 3030 3030 3030 3030 3030 0000000000000000
0000050: 3030 3030 3030 3030 3030 3030 3030 3030 0000000000000000
0000060: 3030 3030 3030 3030 3030 3030 3036 3038 0000000000000608
0000070: 3030 3030 3030 3030 3030 3030 3830 3030 0000000000008000
0000080: 3030 3030 3530 3033 3030 3030 3030 3130 0000500300000010
0000090: 0000 0000 7f45 4c46 0102 0100 0000 0000 .....ELF........
00000a0: 0000 0000 0002 0008 0000 0001 80b8 46e0 ..............F.
00000b0: 0000 0034 0012 4c44 1000 0001 0034 0020 ...4..LD.....4.
00000c0: 0001 0028 0006 0005 0000 0001 0000 0060 ...(...........`
00000d0: 80b8 0000 80b8 0000 0012 4bb0 0013 e830 ..........K....0
00000e0: 0000 0007 0000 0010 0000 0000 0000 0000 ................
00000f0: 0000 0000 3082 0003 1440 0030 00c0 3821 ....0....@.0..8!
0000100: 30a2 0003 1440 002d 2ce2 0004 1440 002b 0....@.-,....@.+
0000110: 2402 0003 0046 1023 28c6 0004 14c0 0013 $....F.#(.......
0000120: 3043 000f 1060 0018 2862 000c 1040 000f 0C...`..(b...@..
0000130: 2862 0008 1040 0008 2862 0004 1440 0012 (b...@..(b...@..
0000140: 0000 0000 8ca2 0000 24a5 0004 24e7 fffc ........$...$...
....
0004cd0: 0000 000e 0000 0001 0000 000f 0000 0000 ................
0004ce0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0004cf0: 80ca 5c48 80ca 5c48 0000 0000 0000 0000 ..\H..\H........
0004d00: 0000 0000 0878 9cb4 bd0d 785c d579 2efa .....x....x\.y..
0004d10: ed3d 2379 6c8f f1f6 782c 0647 8119 6b4b .=#yl...x,.G..kK
0004d20: 1a2c 850c ae42 d454 4d27 926c 0b30 41fe .,...B.TM'.l.0A.
0004d30: 0114 e204 4596 6d25 715a 913a a7b4 f149 ....E.m%qZ.:...I
0004d40: 2792 0027 4796 8470 5db7 a57d 2692 6c94 '..'G..p]..}&.l.
0x0000094 - start of ELF part
0x0004d06 - start of zlib compressed part.
