Skip to content

Latest commit

 

History

History
30 lines (16 loc) · 2.41 KB

README.md

File metadata and controls

30 lines (16 loc) · 2.41 KB

Firmware exploration - Argon iNet2+

I created this page to document my findings from tinkering with my Argon iNet2+ DAB/FM/Internet radio. I am not very happy with the firmware provided by Frontier Silicon (the radio is based on a FS2026-5 module), but I lack the knowledge to do anything about it. I hope to give those with the know-how some clues along the way.

Here is the information I have managed to gather about the module:

CPU/processor - the system is based on the Chorus 3 SoC with a CPU from Imagination Technologies: META 122

RAM - Winbond W9812G6KH (128-Mbit SDRAM)*

Flash - Adesto AT45DB321E (32-Mbit SPI)*

Radio receiver - Frontier Silicon FS1112 (Apollo 2)*

Wi-Fi - Marvell 88W8782 (Avastar)*

* I found these specs in a post on a Czech radio forum and have not verified them.

OS - it runs a proprietary RTOS called MEOS (version 5.2), as stated in the Wi-Fi certificate of the module. According to the documentation it is almost entierly written in C.


Other info:

I managed to capture the URL of the firmware through Wireshark and uploaded it here: Frontier-Silicon-Argon-Firmware/ir-mmi-FS2026-0500-0035.2.11.12.EX65933-4RC2.isu.bin

I initially tried to run it through binwalk, but I didn't get anything I could make sense of (I'm a complete novice).

A nmap scan of the radio revealed 5 open ports: 80, 514, 8080, 10003, 52253. I tried telnet on port 514 and discovered what appears to be a debugging system log: debugger