«
»

Ascom/Swissvoice DECT Phone Hacking

Or: How to enable the “Support” menu of Ascom/Swissvoice DECT handsets…

While playing around with the DECT base station built into my new AVM FRITZ!Box Fon WLAN 7270 I just got a day ago I actually managed to get the handset into an endless loop signing on to the base station, failing, beeping and starting all over. I remembered having read about a support menu built into the handsets of these phones and after a little trial and error managed to revive my phone by disabling DECT in the FRITZ!Box base station (to stop the endless looping) and clearing the phone’s registration via the handset reset built into the support menu.

So, how does one activate the support menu? Enter the ordinary menu (on my Eurit 535 that means pressing the right-hand side soft-key) and (blindly) enter the following key sequence: *0#0*0#. Hit the “C” key to leave the menu and press the menu soft-key again. Et voilà: There goes the support menu:

Ascom/Swissvoice Eurit 535 Support Menu

Disclaimer: Use the support menu at your own risk – using some of its features may permanently brick your handset.

Entering the menu will bring up the following menu items (HS = handset, BS = base station):

  • Reset HS-PIN
  • Reset HS ex Dir. (reset handset, but leave phone book in place)
  • Reset HD Total (do a complete handset factory reset)
  • Set Start Menu (?)
  • Reset Sys-PIN
  • Reset BS (reset base station?)
  • Reset BS Total (?)
  • TBR6 Mode 1 HS (?)
  • TBR6 Mode 2 HS (?)
  • TBR10 Mode HS (?)
  • Setup Test Bear. (?)
  • Crash Dump HS
  • Crash Dump BS
  • Prüf.tech.dat.HS (various HS-related firmware and hardware information)
  • Prüf.tech.dat.BS (various BS-related firmware and hardware information)
  • Download P&P (?)
  • NES on/off (?)

I did not touch most of these as some sound quite low-level and I do not want to end up with a bricked handset.

BTW, to disable the support menu, just turn the handset off and on again.

Tags:

This entry was posted on Thursday, January 1st, 2009 at 11:06 and is filed under Hacking, Tech. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

2 Responses to “Ascom/Swissvoice DECT Phone Hacking”

  1. Philipp says:
    March 26, 2009 at 14:15

    Thank you for this very valuable tip! My T-Com Sinus 500i (which is a Swisscom OEM build) had severe problems that couldn’t be solved with the so-called factory reset.

    Using the service menu and doing a real full reset did the trick.

    Note to Sinus 500i users: The procedure is almost the same as described here, with the exception that a big black ‘S’-icon will show up in the upper left display corner upon completion of the keypress sequence. Navigating to that icon and pressing the right softkey will get you into the service menu.

  2. Running Asterisk on a FRITZ!Box 7270 « cat /dev/braindump says:
    December 20, 2009 at 14:49

    [...] a week ago I started experimenting with running Asterisk on my FRITZ!Box 7270 to replace my DECT phone, which has been getting a bit long in the tooth, with a SIP client running on my new Motorola [...]

Leave a Reply