{
  "added_at": "2026-11-08",
  "additional_evidence_urls": [
    "https://github.com/FratteFlorian/zte-cpe-sms/blob/fcc32d45d8ca3fee4400e5850180de4c33675fad/README.md"
  ],
  "category": "reconstruction-cases",
  "class": "hardware",
  "description_en": "zte-cpe-sms reconstructs access to the internal SMS API of ZTE MC889 and related 5G CPE devices. Its protocol notes describe login hashing, an RSA session-key exchange, a token that must be recalculated after key exchange, and UCS-2 message encoding; Node.js CLI and web clients use those findings to read and send SMS.",
  "description_zh": "zte-cpe-sms 重建了 ZTE MC889 等 5G CPE 设备内部短信 API 的访问流程。协议文档记录登录哈希、RSA 会话密钥交换、交换后需重新计算的令牌，以及 UCS-2 消息编码；Node.js 命令行和网页客户端据此收发短信。",
  "entry_url": "https://awesomerea.org/resources/zte-cpe-sms-case/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/zte-cpe-sms-case/",
  "evidence_class": 2,
  "evidence_status": "observed",
  "evidence_url": "https://github.com/FratteFlorian/zte-cpe-sms/blob/fcc32d45d8ca3fee4400e5850180de4c33675fad/docs/PROTOCOL.md",
  "group": "cases",
  "id": "zte-cpe-sms-case",
  "json_url": "https://awesomerea.org/resources/zte-cpe-sms-case/record.json",
  "kind": "case-study",
  "markdown_url": "https://awesomerea.org/resources/zte-cpe-sms-case/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/zte-cpe-sms-case/index.md",
  "name": "zte-cpe-sms: reconstructing ZTE CPE SMS API access",
  "name_zh": "zte-cpe-sms：重建 ZTE CPE 短信 API 访问流程",
  "record_type": "resource",
  "relationship": "independent-reconstruction",
  "requirement_facets": [
    "prerequisites",
    "scope",
    "limits",
    "license"
  ],
  "requirements": [
    "Node.js 18 or newer and the router's web UI password are required.",
    "The documented protocol findings were checked on MC889 firmware BD_ATMC889V1.0.0B19.",
    "The web UI has no login and is intended for a trusted LAN.",
    "MIT License."
  ],
  "requirements_zh": [
    "需要 Node.js 18 或更新版本及路由器网页管理密码。",
    "协议研究针对 MC889 的 BD_ATMC889V1.0.0B19 固件。",
    "网页界面没有登录功能，供可信局域网使用。",
    "采用 MIT 许可证。"
  ],
  "scope": "unknown",
  "targets": [
    "protocol"
  ],
  "url": "https://github.com/FratteFlorian/zte-cpe-sms",
  "verification": "source-reviewed",
  "verified_at": "2026-11-06"
}