BCM routers

From kitz wiki
Jump to: navigation, search

Broadcom-based modem/routers


This table lists modem/routers with Broadcom DSL chips, with their default GUI and telnet login details.


Manufacturer Model Chipset IP address Login name Password 2nd stage login? Shell command CLI command prefix
Actiontec C1000A BCM 192.168.0.1 No xdslctl
C2000A BCM 192.168.0.1 No xdslctl
Asus WL-600G BCM 6348 192.168.1.1 admin admin No
Asus DSL-AC88U BCM 63138 192.168.1.1 admin admin No
Belkin F1PI243EGau (BoB) BCM 6362 10.1.1.1 admin (?) admin No
Billion 7700(N) BCM 6328 192.168.1.254 admin admin No adsl
7800(N) BCM 6358 192.168.1.254 admin admin No adsl
7800DXL BCM 6361 192.168.1.254 admin admin No adsl or xdslctl
8800NL BCM 63168 192.168.1.254 admin admin No adsl or xdslctl
8800NL R2 BCM63381 192.168.1.254 admin admin No adsl or xdslctl
8900AX BCM 192.168.1.254 admin admin No adsl or xdslctl
BT HomeHub 5B (Arcadyan) BCM 63268 192.168.1.254 admin Locked Locked
D-Link DSL-2300U BCM 6338 192.168.1.1 admin admin No adsl
DSL-2540B BCM 6338 192.168.1.1 admin admin No adsl
DSL-2542B BCM 6338 192.168.1.1 admin admin No adsl
DSL-2640B BCM 6348 192.168.1.1 admin admin No adsl
DSL-2740B BCM 6358 192.168.1.1 admin admin No adsl
Dynalink RTA230 BCM 6345 192.168.1.1 admin admin No
RTA1025W BCM 6348 192.168.1.1 admin admin No
RTA1025W rev2 BCM 6348 192.168.1.1 admin admin No
RTA1046VW BCM 6348 192.168.1.1 admin admin No
RTA1320 BCM 6338 192.168.1.1 admin admin No
RTA1335 BCM 6338 192.168.1.1 admin admin No
EE Brightbox V2 (Arcadyan) BCM 63168 192.168.1.1 admin Locked
Free Freebox V4/V5 BCM 6348
Freebox V6 BCM 6368
Huawei HG610 BCM 6368 192.168.1.1 admin admin Yes sh xdslcmd
HG612 BCM 6368 192.168.1.1 admin admin Yes sh xdslcmd
HG622 BCM 6368 192.168.1.1 admin admin Yes sh xdslcmd
HG635 BCM 192.168.1.1 admin admin Yes sh xdslcmd
HG658b BCM 6368 192.168.1.1 admin admin Yes sh xdslcmd
Linksys X3000 BCM 6362 192.168.1.1 admin admin No (No telnet server)
Motorola NVG510 BCM 6362 xdslctl (?)
Netgear D6400 BCM 63168 192.168.0.1 admin password No adslctl (?)
D7000 BCM63138 192.168.0.1 admin password No
DG834(G) v4 BCM 6348 192.168.0.1 admin password No adslctl
DG834Nv1 BCM 6358 192.168.0.1 admin password No adslctl
DG834GT BCM 6348 192.168.0.1 admin password No adslctl
DG834PN BCM 6348 192.168.0.1 admin password No adslctl
DGN2000 BCM 6348 192.168.0.1 admin password No adslctl
DGN2200 BCM 6358 192.168.0.1 admin password No adslctl
DGND3300 v1 BCM 6358 192.168.0.1 admin password No adslctl (?)
DGND3300 v2 BCM 6358 (?) 192.168.0.1 admin password No adslctl (?)
DGND3700 v1 BCM 6368 192.168.0.1 admin password No adslctl (?)
DGND3700 v2 BCM 6361 192.168.0.1 admin password No adslctl (?)
DM111P BCM 6348 192.168.0.1 admin password No adslctl
SagemCom F@ST 2504N BCM 6362 192.168.0.1 admin (web UI login, no telnet) sky (web UI login, no telnet) No adsl (command prefix used via custom firmware - 'Sky Router Tool Lite')
F@ST 2504 BCM 6348 192.168.0.1 admin sky No adslctl
Sky SR101 BCM 6362 192.168.0.1 admin sky
Thomson/Speedtouch ST536 BCM 6338 192.168.1.254 Administrator (none) No (custom CLI)
ST546 BCM 6338 192.168.1.254 Administrator (none) No (custom CLI)
ST585 v6 BCM 6348 192.168.1.254 Administrator (none) No (custom CLI)
ST585 v7 BCM 6338 192.168.1.254 Administrator (none) No (custom CLI)
ST608WL BCM 192.168.1.254 Administrator (none) No (custom CLI)
ST708WL BCM 192.168.1.254 Administrator (none) No (custom CLI)
ST780WL BCM 6348 192.168.1.254 Administrator (none) No (custom CLI)
Thomson/Technicolor TG582N BCM 6328 192.168.1.254 Administrator 1 No (custom CLI)
TG585v7 BCM 6338 192.168.1.254 Administrator 1 No (custom CLI)
TG589vn v3 BCM 6368 192.168.1.254 Administrator 1 No (custom CLI)
TG784 BCM 6358 192.168.1.254 Administrator 1 No (custom CLI)
TP-Link Archer VR900 v1 BCM 63168 192.168.1.1 admin No locked Limited custom CLI
Archer VR900 v2 BCM 63137 192.168.1.1 admin No locked Limited custom CLI
TD-W8960N BCM 6358 192.168.1.1 admin admin No
TD-W9970 BCM 63381 192.168.1.1 admin admin No Limited custom CLI
ZTE ZXDSL931vII BCM 6368 192.168.1.254 admin (per device) Yes 2 2 xdslctl
Zoom X7n BCM 192.168.1.1 admin zoomadsl
Zyxel C1000Z BCM 192.168.0.1 No xdslctl
P-870HN-51b BCM 6368 192.168.1.1 admin 1234 No adsl (?)
SBG3300-N BCM 6368 192.168.1.1 admin 1234 No adsl
VMG1312-B10A BCM 63168 192.168.1.1 admin 1234 No adsl
VMG1312-B10D BCM 63381 192.168.1.1 admin 1234 No xdslctl
VMG3925-B10B BCM 63168 192.168.1.1 admin 1234 No
VMG3926-B10A BCM 63168 192.168.1.1 admin 1234 No
VMG8324-B10A BCM 63168 192.168.1.1 admin 1234 No adsl
VMG8924-B10A BCM 63168 192.168.1.1 admin 1234 No adsl


1 The password for Technicolor routers may be the serial number.
2 The ZTE ZXSDL931vII has additional stages to reach the Busybox shell:

 Second stage command: enable, password = zte
Third stage command: shell
After entering shell you have to login - Login: root, Password: root