NOKIA G-2425G-A ONT is COOKED

[DakshK579]

So with a heavy heart, It is miserable to say that our beloved Nokia G-2425G-A ONT is finally cooked after a new update which will be affecting every NOKIA G-2425G-A ONT in Airtel XStream Fiber connection.

So today, I encountered my Nokia ONT to be frequently restarting so at first sight; I removed my UPS & powered it via Direct DC Supply but the same thing happened for around 40 Minutes & then I went into 192.168.1.1 & then I found a new text on the login page.

"Did you know your connection will be secure if you use HTTPS access,"

So as usual I thought maybe this text was displayed every time, but I ignored the text after login, I was surprised that Airtel have removed the Backup & Restore Page, and Access Control Page & locked DNS Settings in Nokia ONT.

So I thought my ONT is already unlocked, I just needed to enter a command every time & I would get it unlocked but to my surprise, ONTUSER which I made into an old backup file & now ONTUSER is not available now admin is TelnetSSH Login but password well I don't know so if you guys know please have me updated regarding this & with this, our Nokia is on a new upgraded firmware with firmware version 3TN00391HJLI94.

Here are some snapshots of new upgrades.



Login Page














So I want to ask everyone what is Delta CFG Tool

 

[TJ10]

What the actual fu-?

 

[DakshK579]

Hey Folks as an update, I have found the link from where my Nokia has installed the updates & accordingly logs said it was a forced upgrade like the system as I recognized while seeing all those logs entries, Airtel via TR069 first set my OperatorID to BRTI from ALCL so they are on their way to lock everyone so disable your TR069 as soon as possible.

http://125.19.17.105:9091/webdav/3TN00391HJLI94.bin Here is the link from where the ONT accessed & downloaded the upgrade package & while seeing this I got to know the username for this link is http_user & password is hidden i.e. ****** (6 Stars so maybe password is of 6 Letters)

 

[DakshK579]

Hey Everyone, would like to confirm one more new update which has been served upon my Nokia G-2425G-A Model, well in the previous upgrade, a log transfer over SFTP Portal was allowed so I had it set up on my ONT so I was getting logs out of my ONT every hour & so in last log, I found My ONT replied this line to Airtel TR069 Server.
[alert] <129>1 1970-01-01T00:01:15.921969+00:00 AONT syslog 3994 - InternetGatewayDevice.ManagementServer.X_ASB_COM_NeedFactoryResetFlag=1

So after this followed reboot system commands & after this log, the same thing happened & ONT got reset back & saved all settings to default & then yesterday evening i.e. 27th August 2024, one new update happened in Nokia with version

3TN00391IJLJ07(1.2402.307)

In this update, we cannot see what's Airtel performing over our ONT as the LOGS Option has been removed now so we cannot see what they do to our ONT at any time. If you guys have disabled TR069 then you are set else we are in a very dangerous situation right now so any guides on how to come back to old software would be very much appreciated.


Thanks for watching

 

[anmolbhard004]

airtel cares for you .

 

[TJ10]

@DakshK579 Hey man, I'm thinking maybe this firmware update isn't meant for end users.
You mentioned you had unlocked your ONT yeah? Did you bother changing the default TR-069 links from Alcatel?

Maybe Airtel tests in-development firmware using those links and it got pushed to your ONT.

 

[DakshK579]

@TJ10 Maybe you are right but as I know Alcatel would not change my product code to BRTI for no reason as I don't think Alcatel ACS gets connected to us for sure but only Airtel TR069 react to us in India & links of TR069 address was Https://tms.airtelbroadband.in:8103

This is the line:
[err] <131>1 1970-01-01T00:01:11.469516+00:00 AONT syslog - - - updateACSStatus--> ACSConnSuccess Http://tms.airtelbroadband.in:8103

& after the update, it had the command like this & in the messages logs command says:
[notice] <157>1 1970-01-01T05:30:50.212850+05:30 AONT cfgmgr 1886 - - SDBG:cfg_db_mgrtn2_handler:314 first=0 upgrade=0 operid=BRTI B1=3TN00391HJLI94 B2=3TN00391HJLI94

more info regarding this:
[notice] <133>1 2024-08-26T14:49:49.430096+05:30 AONT cfgmgr 1920 - - InternetGatewayDevice.X_ASB_COM_NokiaParentalControl.Profile.1.Device.6.X_ASB_COM_DeviceIPv6Address.6. created (0x0,)
[notice] <133>1 2024-08-26T14:49:49.430096+05:30 AONT cfgmgr 1920 - - [rts]InternetGatewayDevice.X_ASB_COM_NokiaParentalControl.Profile.1.Device.6.X_ASB_COM_DeviceIPv6Address.6.,flag=0x10,FLAG_FORCE_WRITE,IPv6Address->2401:4900:1c1b:1c2f:654c:dc24:e98f:efc4);
[alert] <129>1 2024-08-26T14:49:49.810829+05:30 AONT syslog 5496 - - TR069: set customerID=BRTI

So, this means Airtel has the TR069 access in all these transactions & the IP 125.19.17.105 is registered onto Bharti Airtel & main server is 125.19.17.0, so this makes it totally valid that it was Airtel who did all these things & yesterday I unlocked my 2nd router & disabled its TR069 Server but unfortunately it was still giving readings to Airtel MyWifi section with Upgrade Required in Router Details so reset the ONT, made it setup like Old ones & then it didn't communicate with MyWifi & now it says Latest Firmware.

So Airtel is very chaalak bro

Image attached

 

[DakshK579]

@anmolbhard004 Haha that's why I don't require any more care toward my ONT

 

[TJ10]

You can manage the router firmware using Airtel Thanks app?

@DakshK579

 

[tr1k0N4]

Not sure what you mean by 'managing the router firmware', brdr @TJ10?