DW5934e (Snapdragon X72) 4G/5G Modem

ok KFO thx

After an intense period of troubleshooting, I successfully reformatted the modem using Ubuntu 24.04. While the installation process on the router was challenging, I have now fully restored the USB and ADB command functionality.

root@OpenWrt:~# lsusb
Bus 001 Device 001: ID 1d6b:0002 Linux 6.12.62 xhci-hcd xHCI Host Controller
Bus 001 Device 002: ID 2109:2822 VIA Labs, Inc.          USB2.0 Hub             
Bus 001 Device 004: ID 2109:8822 VIA Labs, Inc.          USB Billboard Device   
Bus 001 Device 005: ID 346d:5678 USB Disk 2.0
Bus 001 Device 008: ID 05c6:90d5 QCOM SDXPINNL-IDP _SN:8A93B84D
Bus 002 Device 001: ID 1d6b:0003 Linux 6.12.62 xhci-hcd xHCI Host Controller
Bus 002 Device 002: ID 2109:0822 VIA Labs, Inc.          USB3.1 Hub    


/ AT+customer?
+CUSTOMER :33

OK
/ AT+usbswitch
/ # AT+usbswitch?
+usbswitch: 90D5

The patch are very complex and I need to finish the work and reorganized the patches, once I finish all the dev work I will push the changes to my github.

I am very interested in this as we have also looked at the decompiled source and LOM has discovered quite a bit about it. The plan was to create a patch for the new service but if you have already done this then I’ll wait for your release and save a bunch of work.

BTW, it appears that the DW5932 can also use the new 0xe4 service and this may be used in newer modems.

1 Like

I have returned my DW5934E and got an RM551E instead. The current version of DW5934E seems not able to enable Software AP after it got unlocked, I suspect it might be due to the AP version(Mine was 29) and the firmware update from Dell seems require at least version 47 that added the security boot. So I don’t know when I will back to work on this one unless someone able to upgrade firmware to version 47 and above then I might consider purchase one again. Anyway I will still upload my patches to github once I got some spare time.

Were you able to upgrade your firmware under Ubuntu to above 47?

HI :slight_smile: again

I flashed DW5934e with Quectel Firmware RM550 (XD) I don't care about FCC unlcok since I will get full access easily ,,,, modem is working but I forget to install QCN

Anyone can help to do install QCN on OpenWRT/ROOter on PCie mode ?

ATI
Quectel
RM550V-GL
Revision: RM550VGL01ABR01A02M4G

OK

AT+CFUN?
+CFUN: 5

OK




ri Sep 19 21:20:39 2025 : Create PCie 1 *
Fri Sep 19 21:20:39 2025 : Create PCie 1 * Start of Modem Detection and Connection Information
Fri Sep 19 21:20:39 2025 : Create PCie 1 *
Fri Sep 19 21:20:39 2025 : Create PCie 1 * Product=RM551 17cb 0309 Sub 17cb 0309
Fri Sep 19 21:20:39 2025 : Create PCie 1 *
Fri Sep 19 21:20:39 2025 : Create PCie 1 *****************************************************************
Fri Sep 19 21:20:39 2025 : Create PCie 1 Interface Name : 1 /dev/wwan0at0
Fri Sep 19 21:20:39 2025 : Create PCie 1 Interface Name : 2 /dev/wwan0mbim0
Fri Sep 19 21:20:39 2025 : Create PCie 1 Interface Name : 3 /dev/wwan0qcdm0
Fri Sep 19 21:20:39 2025 : Create PCie 1 Interface Name : 4 /dev/wwan0qmi0
Fri Sep 19 21:20:39 2025 : Create MHI Connection 1 Start MHI
Fri Sep 19 21:20:39 2025 : Create MHI Connection 1 MHI Comm Port : /dev/ttyUSB92
Fri Sep 19 21:20:39 2025 : PreConnect 1 Running PreConnect script
Fri Sep 19 21:20:46 2025 : Create MHI Connection 1 Quectel Unsolicited Responses Disabled
Fri Sep 19 21:20:47 2025 : Band Mask 1
Fri Sep 19 21:20:47 2025 : Band Mask 1 Modem PID : 0122
Fri Sep 19 21:20:47 2025 : Band Mask 1 Modem Model : RM550V-GL
Fri Sep 19 21:20:47 2025 : Band Mask 1
Fri Sep 19 21:20:48 2025 : Band Mask 1
Fri Sep 19 21:20:48 2025 : Band Mask 1 Quectel Response : AT+QCFG="band"


You know I was bound to show up if you are messing with Quectel firmware on non-quectel hardware :wink:

Sounds like the Quectel firehose loader worked for you if flashing was successful.
I also noticed you flashed the 550 AB firmware. Was the AA firmware failing to flash?

Over ADB can you grab

cat /proc/mtd

Xqcn restore isn't possible over Linux as far as I know but it may be possible to grab a backup of the efs2 partition from a real 550 AB (or AA) and flash it via fastboot or EDL.
EDL you'd need to know the nand geometry and offsets but /proc/MTD will help fill in the gaps. If the 550 firmware flashed then the rawprogram XML from it is probably correct.

2 Likes

Hi,

I’ve this module (but V3 version), after switching new firmware, does it appers over USB without any special tricks?

Do you have flashed it using QFlash over Linux?

Thanks!

If you want, I have this modem in BananaPi R4, I can download something for you

I would like to try and flash it with quectel rm550v firmware but is it possible to flash it back to factory firmware if it doesn't fully work on USB mode? Because if it doesn't work on USB mode then I am going to return it and I can't return it with quectel firmware flashed.

###############

For people was asking me how I flashed modem DW5934e to be RM550V (x72)

1/ Install package adb modem manager from system packages

2/ Enter From Terminal and put adb root

2/ put this command : adb reboot edl

Modem will be in Emergency mode so you can flash it by QFirehose files RM550V

After that congratulation modem become RM550V but still PCie but its working .... Now you need to figure how you can add QCN file

After switching to RM550V I couldn't get adb access .. but I can Run At commands on ROOter system and ... The system detect the modem as RM550 x72

(Note im stuck I can't get network :wireless: because I couldn't add QCN file no usb .. maybe we need to do something with modem )

ROOter system is a good option to test this Modem better than OpenWrt.. cuz the PCie in ROOter detected the modem directly not like OpenWrt

QCN file :card_file_box:

@iamromulan I tried the orginal flasher not modfied one by you . but the point

By ROOter System , I can send AT commands (I tried to enable usb mode but no luck)

Dw5934e after changing it to RM550V

----------------
ATI
Quectel
RM550V-GL
Revision: RM550VGL01ABR01A02M4G

OK

-------------

AT+QADBKEY?
+QADBKEY: 23249367
OK

AT+QADBKEY="ceHxJHxTnsbwKWQ"
OK

AT+QCFG="usbcfg",0x2C7C,0x0122,1,1,1,1,1,1,0
OK

AT+CFUN=1,1
OK

Adb root : ( no devices )

-------------

Modem log

Thu Jan 1 00:00:12 1970 : usb-modeswitch Delay for boot up
Thu Jan 1 00:00:12 1970 : usb-modeswitch Delay for boot up
Thu Jan 1 00:00:12 1970 : usb-modeswitch Delay for boot up
Thu Jan 1 00:00:12 1970 : usb-modeswitch Delay for boot up
Thu Jan 1 00:00:12 1970 : usb-modeswitch Delay for boot up
Fri Sep 19 21:20:10 2025 : Create PCie Delay for boot up
Fri Sep 19 21:20:10 2025 : ROOter Initialize Initializing Rooter
Fri Sep 19 21:20:13 2025 : Create PCie Connecting a MHI Modem
Fri Sep 19 21:20:13 2025 : Create PCie PCi Remove
Fri Sep 19 21:20:39 2025 : Create PCie Rescan
Fri Sep 19 21:20:44 2025 : Create PCie 1 *****************************************************************
Fri Sep 19 21:20:44 2025 : Create PCie 1 *
Fri Sep 19 21:20:44 2025 : Create PCie 1 * Modem Vendor and Device ID
Fri Sep 19 21:20:44 2025 : Create PCie 1 *
Fri Sep 19 21:20:44 2025 : Create PCie 1 * ID=0003:01:00.0 : 17cb 0309 Sub 17cb 0309
Fri Sep 19 21:20:44 2025 : Create PCie 1 *
Fri Sep 19 21:20:44 2025 : Create PCie 1 *****************************************************************
Fri Sep 19 21:20:45 2025 : Create PCie 1 *****************************************************************
Fri Sep 19 21:20:45 2025 : Create PCie 1 *
Fri Sep 19 21:20:45 2025 : Create PCie 1 * Start of Modem Detection and Connection Information
Fri Sep 19 21:20:45 2025 : Create PCie 1 *
Fri Sep 19 21:20:45 2025 : Create PCie 1 * Product=RM551 17cb 0309 Sub 17cb 0309
Fri Sep 19 21:20:45 2025 : Create PCie 1 *
Fri Sep 19 21:20:45 2025 : Create PCie 1 *****************************************************************
Fri Sep 19 21:20:45 2025 : Create PCie 1 Interface Name : 1 /dev/wwan0at0
Fri Sep 19 21:20:45 2025 : Create PCie 1 Interface Name : 2 /dev/wwan0mbim0
Fri Sep 19 21:20:45 2025 : Create PCie 1 Interface Name : 3 /dev/wwan0qcdm0
Fri Sep 19 21:20:45 2025 : Create PCie 1 Interface Name : 4 /dev/wwan0qmi0
Fri Sep 19 21:20:45 2025 : Create MHI Connection 1 Start MHI
Fri Sep 19 21:20:45 2025 : Create MHI Connection 1 MHI Comm Port : /dev/ttyUSB92
Fri Sep 19 21:20:45 2025 : PreConnect 1 Running PreConnect script
Fri Sep 19 21:20:49 2025 : Create MHI Connection 1 Quectel Unsolicited Responses Disabled
Fri Sep 19 21:20:50 2025 : Band Mask 1
Fri Sep 19 21:20:50 2025 : Band Mask 1 Modem PID : 0122
Fri Sep 19 21:20:50 2025 : Band Mask 1 Modem Model : RM550V-GL
Fri Sep 19 21:20:50 2025 : Band Mask 1
Fri Sep 19 21:20:51 2025 : Band Mask 1
Fri Sep 19 21:20:51 2025 : Band Mask 1 Quectel Response :
ERROR
Fri Sep 19 21:20:51 2025 : Band Mask 1
Fri Sep 19 21:20:51 2025 : Band Mask 1
Fri Sep 19 21:20:51 2025 : Band Mask 1
Fri Sep 19 21:20:51 2025 : Band Mask 1
Fri Sep 19 21:20:51 2025 : Band Mask 1 LTE Band Mask :
Fri Sep 19 21:20:51 2025 : Band Mask 1 5G NSA Band Mask :
Fri Sep 19 21:20:51 2025 : Band Mask 1 5G NA Band Mask :
Fri Sep 19 21:20:51 2025 : Band Mask 1
Fri Sep 19 21:21:16 2025 : Get Profile 1 Modem 1 is Quectel RM550V-GL
Fri Sep 19 21:21:16 2025 : Get Profile 1 Warning: IMSI cannot be read – SIM card missing or locked?
Fri Sep 19 21:21:16 2025 : Get Profile 1 Default Profile Used
Fri Sep 19 21:21:17 2025 : SimLock 1 No SIM
Fri Sep 19 21:21:17 2025 : Create MHI Connection 1 SIM Error

Hello,

Can you please try to enter the EDL mode and flash the AA(USB) firmware variant present in the Iamromulan Mega folder? https://mega.nz/folder/CRFWlIpQ#grOByBgkfZe5uLMkX2M2XA/folder/2J9kTIzK

Sweet! Looks like you used AB firmware so that module is probably the 512mb flash instead of the 1gig flash like the AA firmware. I don't own a RM550VAB unfortunately otherwise I'd have an xqcn to share but I'll let you know if/when I aquire one.

I am waiting for my Banana pi r4 to be shipped and delivered, but I am currently connecting the module via M.2 to USB 3.0 to windows 10 while touching the two middle test points and it doesn't boot into EDL or show up at all in device manager. Is this expected behavior( I know it's PCIe module but I thought it has USB component as well?) or does this mean I got a dead on arrival module? Thanks!

Put some kefton tape or electrical tape over pin 8 (W_DISABLE1) this is what got me into EDL mode without even shortening the other 2 pins. the only thing I’m currently having an issue with is flashing custom ROM. Does anyone have the sdx75m edl mbn for Linux?

1 Like

Hi thanks for info

Can you show on the modem which pin . You isolated

Thanks :+1:

Back side of the modem
10, (8), 6, 4, 2

2 Likes

Thanks for the help. Have you tried this tool ?

I just ordered one of these modems from AliExpress. I have a BPi-R4 that has a PCIe M2 connection.

Maybe a silly question but as this is a PCIe only modem, how can you access or flash it with a USB adaptor? I assume there are the right ports available, just not for data…

Would be great if the DW5934e can be made to work inside a router board like the Banana Pi-R4 or Banana Pi-R4 Pro - Big ups to the folks here with their efforts in trying to get this to work!