Huawei B593 4G-router SMS
Sunday, February 3. 2013
I got my hands on Huawei B593, punched in a SIM-card and turned the thing on. The admin is at http://192.168.1.1/ and admin password is admin like on many other devices, no surprises there.
Since my SIM is a pre-paid one which I use for testing and temporary Internet access, I simply wanted to see how much credit I had there. But wait! There is no Send SMS -functionality. I got the PDF-manual which said that there would be one. I think every 3G USB-stick software has that, why a 4G router wouldn't have the simple thing?
Little bit of Googling revealed that some telcos actually don't put it there. I did get my box from an independent reseller, but it looked like it was a Sonera (Telia) branded hardware. Little bit of more Googling ended me to one of their competitors, Saunalahti. From their customer support page, I got their firmware, uploaded it and noticed a number of drastic changes. Login screen was changed in to a generic Huawei one. After login my precious SMS-menu was there!
Yet another shame on you Sonera! Why did you leave the SMS-sending out. Idiots!
Update:
The login screen for the Saunalahti firmware version V100R001C260SP055 looks like this.
Update 2:
Most non-Finnish readers cannot read the telco's support-page. Download link for the firmware is http://www.elisa.fi/elisa/docimages/attachment/tuki/elisa_r+m+h+s.tar.bz2
Update 3:
There is an article about firmware from 3 Denmark.
allen on :
Jari Turkia on :
osama khan on :
Huawei B593 4G is cool and very fast. I am in norway with netcom.
Can you please send me the full PDF manual for the 4g router. or if you have the link please send it.
Thank you
Jari Turkia on :
Ajay Sharma on :
Sarra on :
Blandino on :
Product Information
Model: B593s-22
Hardware version: Ver.B
Firmware version: V200R001B236D30SP01C58, Optimus, Portugal;
Hello, I'm having trouble to isolate my LAN from the other LAN created for the client in my store using the Wi-Fi Multi-SSID from this router.
When I use the AP ISolation it doesn't hide my SSID from the other for the client. I believe there's a bug in the firmware. I even use AP Isolation on both SSID, unsuccessfully.
Appreciate any recommendation or a correction to the firmware.
Thanks,
Paul on :
Thanks a mil,
Paul
Jari Turkia on :
I'll update the original blog entry with a screenshot of it.
Lars Krog-Jensen on :
Jari Turkia on :
Paul on :
could you please send me the link to the firmware so i can dowbload it.
many thanks!!!
Paul
Jari Turkia on :
Paul on :
thanks a mil for your efforts.
paul
Jari Turkia on :
Paul on :
thanks a mil,
Paul
Jari Turkia on :
Paul on :
I really appreciate your help!
Paul
Philip on :
I have now got a new unlocked Huawei B593 from www.komplett.se and I love it.
My 4G Downspeed: 22Mb/sec Upspeed: 4Mb/sec. it's okay I Think for now
I have Telia Sonera and a prepaid simcard.
Only problem is the sms function not working when sending.
Recieving sms works totaly fine, but not sending.
I have firmware version: V200R001B180D20SP00C1064 and it is the latest version so far I think.
Have talked to Telia Sonera Support and they say that the B593 do NOT have any sms function at all ?????
That Company i incredible !!!!!
But I see a sms functions when I go in to router preferences.
The router is recieving sms fine but when sending it's not working.
What should I do to get it to work ?
Thx !!
Jari Turkia on :
Hussain on :
Regards,
Philip on :
I havent got any downloadlink.
The software were allready on the modem/router when I purchased the modem.
Perhaps you can go to www.huawei.com and seek for it or ask the support on that site.
I don't now if I can get a copy of the software out from my modem ?
Is that possible ?
Anders E on :
Thank you for this information, i have not yet bought this product, but I have a question regarding the use of a regular GSM SIM in this product.
-Can you use a mobile phone SIMs card that have a data plan?
-And If it works: Can you connect a regular phone (rj11) or a Voip phone (rj11) and use it to call with; Using the Nr of the regular SIM?
This should be pretty easy to test... Put a Phone Sim. Connect a old phone and then use another phone to call the nr.
ThX!!!
Jari Turkia on :
eduard on :
Thanks a lot Jari!
Jari Turkia on :
Joakim S on :
The phone number on the SIM is not accesible through the RJ11 ports. Those ports are for the VoIP feature (that Telia among others has disabled in their firmware). With the correct firmware you have the possibility to connect the router to a SIP provider and use a regular analog phone over your internet connection.
nginmu on :
I have a SIM from '3 UK' which is supposed to be pay monthly for data only, but i can't find anything in the t&c's that says you can't use it for voice. Outgoing voice calls get charged (fairly heavily) as 'extra minutes' / outside of allowance.
nginmu on :
nginmu on :
Looks like 4G simply doesn't do voice calls at least in the UK, as of yet. Apparrently the mobile station is expected to drop back to 3G automatically for voice at the moment, so maybe the B593 itself is incapable of doing this. Or as per earlier comment, maybe it does try but it's the network that refuses.
nGinmu on :
nGinmu on :
http://martybugs.net/wireless/collinear.cgi
With this antenna attached to external antenna port #1 on the B593, and the antenna config set to permanent external, recovery to 4G after a voice-call 3G dropback does occur automatically after a variable time. It's obviously a signal strength issue.
I noticed that the antenna config setting 'auto', seems to detect the presence of an external antenna only if it is a loop type with DC continuity across shield and inner conductor. Non-closed circuit antennas like the colinear / ground plane whip etc do not seem to trigger automatic detection.
Since the 'external' setting applies to both antenna ports the same I suppose, if you use a non-loop antenna you're best going the whole hog and fitting two.
My yagi had a loop-type driven element so the auto setting was able to select external for port #1, and internal for port #2.
Peter B. on :
I have a B593-u12 .... is there any firmware that can do the same? I want to make and receive calls through the inserted SIM.
Sorin on :
It has SMS and VoIP, in other words it has all the modem's capabilities enabled.
BTW, i have tried the finish firmware and the i had lots of dropped connections on Tele2 unlocked B593. It doesn't happen with Tele2 Sweden firmware neither with 3DK firmware. I am using the 3DK firmware on Tele2 Sweden router/modem as I type. Works flawless. 900Mhz 4G in my area.
Cheers
Jari Turkia on :
Stephan V on :
will on :
Jari Turkia on :
Ufuk on :
The links you have provided are for u-12 I guess. I have been googling for it for one week already and about to go crazy!
Huawei website provided no help as well.
My external antenna option is disabled by the operator and I badly need the firmware, which will enable that functionality.
Please help!
Jari Turkia on :
Søren Christensen on :
Jari Turkia on :
Erik Johansen on :
WPS lamp ceeps blinking -any way to restart ??
Kind Regards
Erik Johansen
Jari Turkia on :
Erik Johansen on :
Just what i was afraid off.
Better go bye a new one.
Kind Regards
Erik
edwin on :
Geza on :
I have one of these routers from Sonera. I am trying find out how to enable remote access to this router so i could access it from somewhere else (wan access). Usually one has to enable it in some of the settings but there is none for this router....
Cheers from Oulu
Jari Turkia on :
http://blog.hqcodeshop.fi/archives/130-Exploit-Running-commands-on-B593-shell.html
Then you'll need to study how to drill a suitable hole to IPtables for any traffic arriving from interface hed0 (The World). Good luck!
Geza on :
cheers
Jari Turkia on :
An on :
my version is V100R001C82SP055
I am not so used to all this so sorry if I am talking no sense...
I have seen you can enable QoS, but you can only switch the radio button, you can not add any rules... Is it correct? I wanted to enable the QoS so I can Broadcast and limit my band usage (6 devices connected to the router wifi or ethernet).
Thanks for any help,
An
Jari Turkia on :
AN on :
I guess that is over my possibility, I do not have much knowledge of the topic but I will sure try.
zattara on :
Dont know if it needs resetting, firmware change, flashed or whatever.
Basically you cant use any other sim aside from a single network
Jari Turkia on :
Tim on :
I need to check the version before trying out the elisa firmware.
Thanks.
Jari Turkia on :
Lechopij on :
Jari Turkia on :
Ari on :
Today i got b593s-router.
If i want to use it by two ssid-network (max 4 separate network?),
is there any way to limit dl/up-speed for the other network and let the other one be unlimited?
E.g. ssid: arin_privite and ssid: arin_open, where arin_open should be limeted wlan.
I did't find any options for that...
brgds,
-ari
Jari Turkia on :
sven on :
I just flashed the Elisa firmware but cannot login to the router. Password is not admin. Can someone help?
Jari Turkia on :
Albinito on :
Jari Turkia on :
I guess, in reality you don't. So, you don't get much out of the fact, there are quite a few different models of B593 (see: http://blog.hqcodeshop.fi/archives/127-Huawei-B593-different-models.html).
jarmo on :
Jari Turkia on :
rebje on :
Jari Turkia on :
But about the exploit: On the B593 Linux-side there is a binary /bin/web which handles the entire thing. Any possible missed escaping it has is not handled as a traditional CGI Perl-script, but as an internal process.
Vic on :
How can I unlock it and be able to used for other network operator..
Thanks.
Jari Turkia on :
Typically unlocking works by a receiving a specially crafted SMS, but I don't know any details on how it is done on B593. The box is capable of receiving, so it could be like that.
kazmi on :
Jari Turkia on :
ihsan on :
Jari Turkia on :
Yasar Pk on :
Imei 863168010191444
Jari Turkia on :
Even if I would know how the SIM unlocking works, I wouldn't do it. My unit was bought as SIM-free, so I don't even know anything about it.
Mhoy on :
I need to access the web interface but I can't login. I believe the password has been changed from the default (ie admin).
Jari Turkia on :
There is a reset-button in the side. If pressed for 2-5 seconds, it will reboot the unit. If pressed for 5+ seconds, it will do a factory reset.
Depending on your factory firmware, this will reset your admin password. That being said, if your admin password was unchanged, reseting the unit won't reveal it to the world.
Mhoy on :
i was able to do the hard reset and now the modem is GUI is accessible.
im trying to unlock the modem. i have the unlock code but i cant find the SIM lock under the general settings menu. i believe it's hidden.
unlike mu USB stick E176G, I easily onlocked it since the SIM lock menu is available.
Can you give me some points on how to show this menu entry.
thanks..
Jari Turkia on :
jham on :
Jari Turkia on :
If you have some sort of access to the box, they you may have some hope. SSH-access would be very good. Web console access with guest-access won't do it.
Jham on :
Jari Turkia on :
Can you access SSH?
rahman on :
mike navarro on :
Jari Turkia on :
Long version: s-22 is not a well hacked platform. I'm sure, that it has plenty of "features" that'll help you to do that, but most hacking is done to u-12 model.
One of these days, I'll go borrow a s-22 and see what can be done with that.
Albinito on :
Jari Turkia on :
See the pics (http://blog.asiantuntijakaveri.fi/2014/08/whats-inside-huawei-b593u-12-lte-router.html). There is no "module" to be replaced.
Pablo on :
Jari Turkia on :
With B593 there is not much you can do, except go to your favorite computer parts store and go for 5 GHz Wi-Fi. It's pretty much unused.
Pablo on :
Jari Turkia on :
Wireless communiation is tricky and the performance it provides changes a lot with a number of factors: distance between AP and client, physical objects blocking the signal, any overlapping electromagnetic disturbance, quality of electronics design, quality of electronics implementation ... the list goes on.
To get understanding what goes on, please cross test your hardware. By cross-testing I mean use a number of Wi-Fi clients with your B593 and other access points. All clients should be slow against your B593 and faster when using some other AP.
By this type of approach, you should gain understanding if it is the client issue or AP-issue.
PDI on :
I bought some weeks ago B593s-22 with Elisa's (finnish) firmware and it seems to work just perfectly, even with Sonera's SIM
Today I played with those two antennas. I have set bot of them to external, but I'm just wonder, what is the meaning of the antenna on the right side, when looking the box from behind ?
It makes no difference to anything when I unplug my DIY omni's center pin. But when I do that for the left antenna, everything stops working. Same thing when I remove stock antenna from right side.
By tuning the frequency of DIY omni, it can make huge difference. I've never got over 40M (50M max, limited by 4G-contract) but now I managed to clock 43M down somewere around 1800mhz freq.
Does anyone know how to see which 4G band (mhz) the router is connected to ? I would also like to know how to see cell tower ID so I could see if my DIY antenna can reach other towers on higher frequencies. I doubt I found at least 4 towers, but I'm not sure.
And one more thing. Someone was asking about port forwarding things. At least here in Finland all mobile operators has blocked most or all incoming TCP and UDP ports. Some of them are also keeping customers behind NAT. DNA (operator) does have port 500 open for the traffic at least in their 3G contracts and Sonera is offering "OpenGate" service to get external IP and open ports for few euros per mont. Sonera's IP is dynamic, so DDNS service is needed to establish the connection from outside. If want to use Sonera's "OpenGate" service, remember to change your APN to "opengate", otherwise ports are not gonna work
//PDI
Jari Turkia on :
See: http://www.lte-anbieter.info/ltewatch/huawei.php
And a Finnish discussion thread about the tool: http://murobbs.plaza.fi/internet-tietoturva-ja-muu-tietoliikenne/1179537-huawei-4g-lte-tyokalu-e5186-b593s-taajuusalueen-valinta.html#post1714489800
PDI on :
I also tried both exploit scripts without success. It gives following text (fyi, I know my version is different than older ones):
user@ubuntu:/home/pdi# ./latest.pl --run-cmd 192.168.0.1 admin "cat /var/curcfg.xml"
Content-Type" content="text/html; charset=utf-8" />
replace
Jari Turkia on :
I actually arranged to get a s-22 for couple of days to hack it. So, we'll see what I can do with it.
zeroshinta on :
it is under the "Services" tab and think mine hides it so when you manually go to http://192.168.1.1/html/sms/message.asp it shows you the sms page.. ** logged in as administrator**
hope it helps
Jari Turkia on :
Funny thing, that the telco would want to disable the SMS-functionality by only hiding it from the menus.
iltaf on :
Good Day.
I unlocked my CPE B593 with unlock code,after unlock i create profile and used it normally .But unfortunately ,now its again locked with other opreater sim.Only mobily sim is working,Can you please guide me.
Jari Turkia on :
Conrads on :
Jari Turkia on :
I have a SIM-free u-12 and have tested some s-22 units, nothing else. I don't know how to unlock them nor are interested in figuring out how to do it.
If anybody knows, please share the info.
Peter on :
Jari Turkia on :
http://blog.hqcodeshop.fi/archives/14-Huawei-B593-4G-router-SMS.html#c1003
Ajay S on :
Jari Turkia on :
It's a very trivial task. However, not all telcos allow incoming traffic. In some cases your router gets a NATed IP in the beginning, so you're out of luck. In some cases you'll have a proper IP-address, but still incoming traffic is blocked by your telco.
For example with TeliaSonera, incoming traffic is an extra service which they take a montly fee.
Ali on :
i have (mobile phone LTE SIM) card that have unlimited data plan
i was using it for 5 month with out any issue
last two weeks something worried happened and stopped working in both router i have (u-12, S-22)
the connection have full signal (can receive and send sms) and connected but internet not working, however when i tested it in mobile device (iphone-ipad) its working.. !! bring it back to router (connected to network -full signal-can send and receive msg) but no INTERNET
..
might be provider block the device!!
any way to pypass this ?
Jari Turkia on :
It would be a good idea to verify your APN-settings. If something is off there, it won't connect.
T-Dog on :
Thanks
Jari Turkia on :
I don't know about SIM-locking nor how to navigate around that.
Matti on :
Jari Turkia on :
Norman on :
Jari Turkia on :
That is what you get with a wireless connection, occasionally it spells: speedless.
There is a very good reason why I prefer wired connections.
Alan on :
I am having some trouble with my b593 router.I got external antenna for it but port behind signal bars only seems to work when i use left port i get nothing.Any help would be appreciated.By the way i live in Ireland
Jari Turkia on :
Looks like you both are experiencing same issues.
Teebon on :
Did anybody experience any connectivity problems with the B593S? I am running it on Sonera 3G network as the provided bandwith is suitable enough and the pricing faitly cheap. Anyway, recently I keep on losing internet connection. Some days almost every 15-30 min other days just once or twice a day. B593S anyway shows that I am connected with the network, maybe it could also be the WLAN modul that has a problem. For my Nexus 7 I have also Sonera 3G network contract and no issues.
-T
Jari Turkia on :
That being said, the connection you're experiencing and can measure is mostly affected by the speed of the cellular network. The speed your network can provide is a LOT to do with other people using it. A B593 in UMTS-mode (3G), can handle only 1 connection at a time. If there is lot of users and/or lot of traffic, your box might decide to switch cells constantly while struggling to provide you with as-good-as-possible connection. But that's how cellular networks are built. There is no point in staying in a fully crowded cell, but switching to another as crowed one won't help either.
Without knowing more details of your cellular environment, the only thing to do is focus on your WLAN-connection. I've seen 50+ WLANs occupying 2,4 GHz band in Helsinki area on some places. I'm sure nobody had decent connection on that spot, I know I didn't. The obvious fix was to go 5 GHz and that helped, it's like moving to live in a desert. Nobody else there.
Plug in an ethernet cable to your B593 and hook it up to a computer. Try surfing with that connection. If it still breaks as you describe, the fault is in cell network side, if it doesn't it's the WLAN, that's causing your issue. Then again, try using your Nexus as a router. Make it a WLAN hotspot, and try surfing via that. Lot of different options to check out.
Teebon on :
I checked the coverage from Sonera's cellular map and we are somewhat on the edge of 3G coverage area, approx 100m to the border. 4G has much better coverage. Just wanted to avoid to pay the higher fee for 4G as the bandwith of the 3G is usually sufficient enough.
I might try the band change, already set the channel to a fixed one, there are about 10 other WLAN around.
Jari Turkia on :
Scenario 1:
You do nothing. Your connection continues to fluctuate until they decide to improve the network. Not likely to happen in the near future.
Scenario 2:
You hack into your box, lock the frequency to LTE-band. Then this dreaded LTE cell shrinkage happens... Guess who's out of connection. You chose not to allow switching to 3G frequency.
Scenario 3:
Amp up your connection. Hook you box with a proper antenna (example: http://www.yeint.fi/index.php?main=64&productCat=2760&productID=25645). Depending on your location and antenna location(s) you may have to choose between 4G and 3G. If you luck out, you'll have better reception on both. The thing with wireless connections is, that for them to work you need decent signal levels. If you don't have it, you need work on it.
Take your pick.
Teebon on :
Thanks for your advise anyhow.
Out of interesst, to which port an outdoor antenna would have to be connected assuming looking straight at the backside of the router, the left or the right port?
Jari Turkia on :
My run with the B593 s-22 successor (https://blog.hqcodeshop.fi/archives/258-Huawei-E5186-prototype-reviewed.html) revealed, that the RF-side can be made much more sensitive. I was testing in a spot where there was 1 bar of LTE with B593 s-22, but 3 with E5186. So, Huawei-guys have gotten new components and learned to make the antenna better. Still it never hurts to do some exploring at home for the best location for the router.
Ajay Sharma on :
Has anyone configure port forwarding on Huawei B593 4G- Wireless router with cable connection ...would appreciate some info....
Jari Turkia on :
See: https://blog.hqcodeshop.fi/archives/105-Using-the-DMZ-setting-of-Huawei-B593.html
5hadow on :
jamel natha on :
Jun on :
I have Huawei LTE CPE B593 with the details below.
Device website is 192.168.254.254
Login Name : user
Password: @l03e1t3
Product Information
Model:
B593s-931
SN:
F5Y7S14B08001355
IMEI:
864327020768711
Hardware version:
Ver.A
Firmware version:
V200R001B270D15SP07C158
Firmware build time:
Nov 4 2014 / 16:34:32
Please help guys how to unlock this model
Jari Turkia on :
If you want to do the unlocking by yourself, feel free. I'm not interested in that.
Tharusha on :
Jari Turkia on :
Some useful information which you are not providing to us would be for example:
- how much lower your measured speed is from what you're paying for?
- are you using UMTS or LTE?
- what kind of signal levels are you getting? RSSI? RSRQ?
- have you experienced same symptoms at any other location?
- are you using external antenna?
Sjr on :
Jari Turkia on :
To get that done you'd need to:
1) create suitable piece of software sending your SMSes
2) hook a call from a publicly available service on your router to call your piece of SMS sending software
... both of which are tasks of significant level of difficulty. Possible, but hard to achieve.
ahmed on :
Minoru Kurata on :
Jari Turkia on :
You may want to study RS-232 diagnostic options:
https://blog.hqcodeshop.fi/archives/260-Huawei-B593-s-22-RS-232-pins.html
or
http://blog.asiantuntijakaveri.fi/2014/08/serial-console-on-huawei-b593u.html
mark laurence tanig on :
Jari Turkia on :
luke on :
When trying the new script I am logged is as admin
relogit on :
Nice topic about this amazing router. Really leading information about this one.
I'm looking for deep informations about the usage of this one as a sms gateway.
Goal is to use it as sms sender drived by programation like java softwares...
Could somebody share some experience about this ?
Or indicate a link to similar discussion ?
thank you very much by advance...
Jari Turkia on :
It cannot be done by any simple means. I've written custom software an ran that in the box. If you're willing to do that, then it is possible to build an interface that reads external SMS-data and uses the B593 for delivering that.
Dave Graham on :
Hi and thank you so much for your generous and erudite comments. I bought a Huawei B593 s22 a couple of days ago and have already learnt more than I ever thought possible about the insides of the box. Mainly from this blog and a few others in za. I'm not sure of the protocol in asking questions here so please forgive me if I'm not doing it in the right way but .... is there a manual anywhere which actually defines the expected operation of the unit? For example, there are a couple of RJ11 connectors on the back of the box which are mentioned in passing as being for use with analogue phones. Does this mean that I can just use an analogue phone to access the voice facilities on my SIM (which is a voice and data contract)? Or does it mean that I can use an analogue phone as a connection into a voip channel with all that implies. There is a diagram that I found in the Huawei tech spec which says that the box has a DSP and a SLIC in it which suggests the former but I'm damned if I can actually get anything to happen in terms of dialling in or out. Having said that, the box reacts to an incoming call by dropping from 4G to 3G as evidenced by the indicator on the panel changing colour. Has anyone had any experience of operating this function? I would so like to be able to use the voice functions as it would make it unnecessary to have two phone accounts.
As an aside, how is it possible that a company can spend millions developing a product and then not tell people how to use it. And even not tell their resellers how to sell it to their customers.
Anyway, thank you again for providing such excellent insights
Regards Dave Graham
John on :
6 years later and still a useful blog, well done.
The FTP hack worked perfectly for me in discovering the admin SSH password, for which many thanks. And the AT command set gives me access to the raw data I need.
All of which is overkill when all I need is the quality of signal data. In your travels did you note where in the tree this data is stored? All I am after is a way of logging this data over time.
Many thanks in advance, and of course I understand that life may have moved on!
Jari Turkia on :
printernumbersupport on :
Exactly we find this type of information from the long term.
If you are also searching for ... [whatever this guy attempted to advertise here].
Jari Turkia on :
Please, don't try to plug your stuff here. It's just rude.
Amara Josephine on :
If you are also searching for ... [whatever this guy attempted to advertise here].
Jari Turkia on :
Please, don't try to plug your stuff here. It's just rude.
Old huawei on :
i might need some help how to easiest jump to a firmware version where i can lock the 4g into 800
i have my old b593s-22 with the following info:
B593s-22
Hardware version:
Ver.B
Firmware version:
V200R001B180D35SP00C56
Firmware build time:
Sep 11 2013 / 11:12:01
Till now it has been working well with the tele2 firmware and 2x 18db 800mhz antennas in "ristipolarisaatio" but sometime ago dna opened a 1800 channel nearby and the modem tends to jump on it from 800 eventho the signal is weaker in the higher bandwith.
I noticed theres a several better firmwares out there but can't get this damn box eating anything else after that tele2 i changed years ago for 4g locking