Nokia G-1426G-C (AOT4221NK) Router Rooting & Unlocking

[vinnidigit]

to reset this device disconnect the fiber and press the reset button for 1 min then boom... dont forget to disconnect fiber

 

[Vickey007]

You can reset via login into router login page.

 

[manishremo22]

@vinnidigit it takes 10 seconds to reset and i don't recommend disconnecting the fiber, its better to keep it plugged in, even while resetting.

 

[manishremo22]

Here's how, you can reset or restart it from the router page.

 

[manishremo22]

 

[ivinay]

Anyone tried using TP-Link XX530v AX3000 in bridge mode with Nokia G-1426G-C (AOT4221NK)?

 

[Kamalesh]

AOT4221NK - Nmap scan results + port 4443 TR-069 findings

Hi everyone,

Did an nmap scan on the AOT4221NK (Nokia G-1426G-C) and found some
interesting things. Sharing here for the community.

Open ports:

• 22/tcp CLOSED (SSH exists in firmware but disabled — not filtered!)
• 443/tcp OPEN (Airtel locked web UI)
• 4443/tcp OPEN (Nokia native interface — needs client certificate)

Key finding on port 4443:
When you open https://192.168.1.1:4443 in browser you get:
ERR_BAD_SSL_CLIENT_AUTH_CERT

This means port 4443 is the TR-069/CWMP remote management interface.
It requires a CLIENT CERTIFICATE to access — this is how Airtel's NOC
connects to push firmware and config changes.

SSL cert details on 4443:

• CN: www.webgui.nokiawifi.com
• Issuer: Bharti-Airtel, Tamilnadu
• DNS: webgui.nokia.com, dsldevice.lan
• Valid: 2025-2030

TR-069 cert on 443:

• CN: Airtel-CPE-0001
• Issuer: UCCLOCAL-CPUNLYNCOTZT01-CA-1
• Key: RSA 4096-bit
• Valid: 2024-2034

SSH observation:
Port 22 is CLOSED not FILTERED — means SSH daemon exists in firmware,
just disabled. Could potentially be enabled via TR-069 config push.

If anyone can intercept TR-069 traffic or extract Airtel's client
certificate, we can connect to port 4443 and push our own configs —
enabling SSH, VoIP routing, MU-MIMO etc.

Router uptime from scan: 42 days (stable!)
MAC: 0C:36:23 (Nokia prefix confirmed)

Hope this helps the rooting effort. Will share more findings.

 

[spdixit]

Hello @Kamlesh & Team,

Have u got any solution of this Router lock ? Please let us know.