Solved: Re: WAP4410 Forgotten Password

jgottschall · ‎12-09-2013

We have a WAP4410N that is physically inaccessible due to its location at the peak of a large warehouse. It is online and functioning, but we have no record of the administrative password to log in and change settings on the unit.

Is there any way to reset the password remotely? Can we reset to factory defaults by sending an HTTP request of some kind?

Please advise.

matthew1471 · ‎01-02-2014

Ironically, due to a backdoor in the code that Cisco are investigating and will inevitably ultimately remove, your luck is in, there is a way : https://github.com/elvanderb/TCP-32764

I have confirmed this works with the WAP4410N: https://github.com/elvanderb/TCP-32764/issues/11

It looks like it was inserted by a company working for Cisco (back in the Linksys days).

You will need to install and write a script in the programming language Python.

View solution in original post

matthew1471 · ‎01-02-2014

Ironically, due to a backdoor in the code that Cisco are investigating and will inevitably ultimately remove, your luck is in, there is a way : https://github.com/elvanderb/TCP-32764

I have confirmed this works with the WAP4410N: https://github.com/elvanderb/TCP-32764/issues/11

It looks like it was inserted by a company working for Cisco (back in the Linksys days).

You will need to install and write a script in the programming language Python.

jgottschall · ‎01-06-2014

Thank you for that! Unfortunately, it's actually a WAP4400N, and it is not vulnerable. We have four of these WAP units, one is a 4410N and is vulnerable and the other three are 4400's. The one I need to get into is a 4400.