Support for Novatel T1114 (Verizon MiFi Home)

[JonGerhardson]

What problem does this feature solve or what does it enhance?

The Novatel T1114 mobile Hotspot was sold by Verizon as MiFi Home, and supports bands 4 and 13. Similar to the Orbic device it runs something called MiFi OS, and uses a Qualcomm modem. It is potentially better for some uses because it can run off 5v usb, and has ports for external antennas (LTE and 1x voice I believe). There's a micro-usb port underneath a cosmetic panel on the top, but not clear what it's for.

Does anyone know if there's a way to get root on these (assuming that is needed). I've tried:

lsusb - not shown
adb devices -not shown
ssh root@[ip] connection refused
ssh admi@ "" ""
ssh VerizonBRW@ "" ""

There is a way to manually upload firmware updates from the routers web interface.

There's also a not exposed directory /labtestinfo that on my device (sim card, not activated, antennas not connected) shows the following. (phone number redacted)

===============
Diagnostic Data

NAM: N/A
Mobile Directory Number (MDN): 867-5309
IMSI_S:
Mobile Network Code (MNC):
Mobile Country Code (MCC):
Primary CDMA Channel A: 283
Secondary CDMA Channel A: 691
Primary CDMA Channel B: 384
Secondary CDMA Channel B: 777
Access Overload Class (ACCOLC): 2
Register On Home SID: Enabled
Register On Foreign SID: Enabled
Register On Foreign NID: Enabled
CDMA Band Class: [0_A_SYSTEM] [0_B_AB_GSM850] [1_ALL_BLOCKS]
LTE Band Class: [E_UTRA_BAND_4] [E_UTRA_BAND_13]
Active Band: N/A
Slot Cycle Index: 2
MIP Mode: MIP preferred
MIP Registration Retries: 2
MIP Registration Retries Timeout: 3
Reverse Tunneling: 1
DNS Primary: N/A
DNS Secondary: N/A
Supplemental Channel Request Message (SCRM): 1
Network ID (NID): 0
Error Rate: [CDMA 1x]: N/A [HRPD]: N/A
RSSI: [0]:-128 [1]:-125
Ec/Io: [CDMA 1x]:5 [HRPD]:5
Latitude: 0
Longitude: 0
Tx Power (EVDO): 0
Rx Power 0 (EVDO): 0
Rx Power 1 (EVDO): 0
Packet Zone ID: 0
Call State: Idle
Dormant State: Unknown
MAC Index: N/A
Subnet Mask: N/A
Color Code: 0
UATI024: 00000000 00000000 00000000 00000000
PN Offset:

Proposed Solution

Make Rayhunter installable on the Novatel T1114, probably by uploading custom firmware through the web ui software update tool.

I can try to provide additional information if anyone knowledgeable on this subject thinks it may be possible.

Alternatives Considered

No response

[JonGerhardson]

[JonGerhardson]

[JonGerhardson]

https://verizon.manymanuals.com/networking/4g-lte-broadband-router-with-voice/users-guide-43098/download