Once logged in, you can navigate through the menu-driven interface using the keyboard. Commands may vary depending on the device's firmware version. Here are some general tips:

If you see a login prompt, try these combinations:

If successful, you will see a shell prompt: / # .

If not, proceed to Part 4 – we must enable Telnet through an exploit.


Warning: This may overheat the chip. Use at your own risk.

sendcmd 1 DB p WLANRadio
# Find your radio (usually Radio1 for 2.4GHz, Radio2 for 5GHz)
sendcmd 1 DB set WLANRadio 1 TransmitPower 100
sendcmd 1 DB set WLANRadio 2 TransmitPower 100
sendcmd 1 DB save

Some firmware versions (particularly V5.0.0) listen on port 8023 instead of 23. Try:

telnet 192.168.1.1 8023

Telnet Zte F6640 » 〈Reliable〉

Once logged in, you can navigate through the menu-driven interface using the keyboard. Commands may vary depending on the device's firmware version. Here are some general tips:

If you see a login prompt, try these combinations: telnet zte f6640

If successful, you will see a shell prompt: / # . Once logged in, you can navigate through the

If not, proceed to Part 4 – we must enable Telnet through an exploit. If successful, you will see a shell prompt: / #


Warning: This may overheat the chip. Use at your own risk.

sendcmd 1 DB p WLANRadio
# Find your radio (usually Radio1 for 2.4GHz, Radio2 for 5GHz)
sendcmd 1 DB set WLANRadio 1 TransmitPower 100
sendcmd 1 DB set WLANRadio 2 TransmitPower 100
sendcmd 1 DB save

Some firmware versions (particularly V5.0.0) listen on port 8023 instead of 23. Try:

telnet 192.168.1.1 8023

Верх Низ