Batboard

Hi everyone,

I have a CDM1250 in my shop that I have no idea where it came from. I found it while we were doing a little cleaning up around the shop and though I maybe I would see if it works. It has a codeplug password installed which is preventing me from reading AND writing to it. I have always thought and have read on here in a few past threads that you could overwrite the current codeplug and password with an archived codeplug from the same model. I have a codeplug with a matching model but it still continues to try to read the radio first to "check for compatibility". Am I missing a step here? Is there a way to force in a new codeplug. I don't care about reading or salvaging the codeplug in the radio, I would just like to put one in of my own. Do I need the lab software to do that? I don't have the "unofficial lab software" yet and I have not been able to find it except for on the hackersrussia web site that I don't have the password for. Can anybody help me out?

Eric

Do a search on here for 'password' and you'll probably find(depending on the version of the CPS that you're trying to use) a hack for the CPS executable to let you bypass the password popup in the CPS.

it should overwrite if the model number is an exact match. if it's telling you there is a compatability issue then it could be as simple as a high power radio with a low power codeplug or an ls codeplug and ls+ radio?

I got it late yesterday. I did as someone suggested and used WinHex to 'sniff' the memory and using a radio with a known password and locating where they put it in the memory. Once I knew where to look I could read the locked radio until the password prompt came up and sniff the memory for the unknown password. Worked like a charm.

I did try to write over top of the locked codeplug with an exact model match and it didn't go, it still wanted a password.

Eric

Eric,

I have a CDM-1550LS+ that was programmed with password protect. Did you take a *known* radio codeplug and insert a password and save then find it that way? I can probably do this, just need a few more details about the process.

I have Hex Workshop I could use, maybe you could shed some light on where you found the password in your codeplug and how to change it? You can e-mail me direct at [email protected] or call me 816-272-5249.

Thank you very much,

The latest CPS don´t let you overwrite the codeplug of a password protected radio anymore!
The only way is to modify the .exe file of the CPS or use older CPS (if the firmware is not newer than the CPS).

Andreas

That explains it, then. I am using the newest version CPS, last time I had to do this was over a year ago and we were using the older CPS.

Nonetheless, the e-bay seller provided me with the password, and it is "connect". Seems like there are several people out there with CDM's that are password protected, so you might try the password above.

Thanks everyone for your help!