This software works quite well. Try it out.
1 Like
I dont see reports of people trying it on RD23, did you? The exploit to enable SSH is easy and generally safe to try. But flashing may cause a brick.
Rd23 is the international version of ax3000t?
Have you read the wiki?
Yes i read the wiki, correct RD23 is the international version.
I understand that up to 1.0.76 exploit should work. The discussion here seems to say UART only
Is the UART flash a must for RD23 even if on lower firmware version below 1.0.76?
I see conflicting info or at least itsnt completely clear.
Where exactly do you see conflicting info?
Here is the info from Wiki:
There are two known OpenWrt installation methods for the Xiaomi AX3000T:
-
The first method is the API RCE method. Above, you were given a link to a tool that automates OpenWrt installation using this method, feel free to use. Or, if you don't trust external tools, just use the script from the Wiki. It works great and also allows you to install OpenWrt on the RD23 easily.
-
The second method is via UART method (if you want to learn the hard way). At the present moment, there's no reason to use UART for the initial OpenWrt installation unless your router has received a new non-downgradable and non-exploitable version (as of now, all stock firmware are perfectly downgradable to the exploitable version).
No, it's not "must", it's "either".
Your RD23 with stock version 1.0.76 can be successfully moved to OpenWrt without using UART. See the details in this wiki table, where you can find which stock Xiaomi versions are exploitable.
Ok, now I see why the information seems conflicting for you.
You've started read the forum, and yes, at the beginning it was impossible to install OpenWrt on the RD23 without using a UART.
But things have changed. A new vulnerability has been discovered, and now it's possible to install OpenWrt on the RD23 without UART.
2 Likes
Exactly. I see the tool steps suggest to do options 2 then 7. (Exploit then install firmware). It doesnt suggest option 3 (backup) is that done automatically?
Thanks for the clarification.
Sorry man, never used the Xmir patcher tool.
To be safe, follow the Wiki instructions and create a backup of stock partitions manually.
1 Like
I've created a backup using the tool and it's really easy to do.
Thanks @d687r02j8g , @alexq for the support.
My previous flash of the AC1200 RB02 was perfect, I hope this goes as smooth.
Hi, need ideas how to debug a problem with reboots.
IIRC they started to happen after upgrade to 24.10 from previous stable (23), even with default config. They happen without any warning approx every 30 mins.
Right now have serial link to AX3000T sitting on desk, minimal configuration changes and no clients connected, it rebooted. I added logfile, but this does not help much, only after-boot messages, on serial i see my prompt and then reboot without kernel messages:
root@Wifi:~#
F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [1000]
T0: 0000 024F [010F]
Jump to BL
NOTICE: BL2: v2.6(release):e233a3d581-dirty
NOTICE: BL2: Built : 06:23:27, Jul 30 2023
NOTICE: WDT: disabled
NOTICE: EMI: Using DDR3 settings
lsmod shows no modules called watchdog (also i remember watchdog messages to all open consoles on triggering). Router almost new, open case in room, does not look like temp. issue (but if i could run something like prime95/memtest it would help to rule out HW issues). Router is RD23 with stock BL.
What now, how to debug this issue? I believe it's sofware problem, but then i would see others reporting similar issue, so don't know really.
OK, for now idea is that power supply is not good.
I attached scope, installed stress-ng. While "idle" and "max load" scenario shows no noticeable power difference (there is, but very small), scope shows that there are unfiltered spikes down to 8.8V (power supply is 12V).
And while AP reboots doing nothing every half hour or so - i can't reproduce that with scope attached in 14h period, typical debugging problems 
But i think that power supply is a problem, probably sometimes voltage dips low enough and it reboots.
This router works great with a 5V power source.
The main thing is that it is "stable and powerful". A regular high-quality power bank is quite enough.
got RD03 with 2.0.12 firmware, downgrading through web ui doesn't work and there is nothing to edit in the URL, tftp mode works and wants C0A88964.img (first time) and C0A8896E.img (after entering tftp mode second time) and C0A81F6E.img (third time), after it accepted the file the LED became solid orange, i rebooted it and it loaded stock firmware with no changes except that for some reason LAN 1 port (the same i used for tftp) was changed to WAN and web ui reported some ip address conflict, i did factory reset and it fixed it.
box date is 2025.04
upd: more info here https://4pda.to/forum/index.php?showtopic=1074874&st=17540#entry137110869
tldr: check barcode on the box, if it ends with 706330 - BAD qualcomm, 700833 - GOOD mediatek.
3 Likes
Do you mean you received the RD03v2 model of the Xiaomi AX3000T (the one with the Qualcomm IPQ5018 SoC)? That's disappointing.
the link has everything
1 Like
Thanks for the info
RD03V2 - qualcomm based router.
Firmware: https://cdn.cnbj1.fds.api.mi-img.com/xiaoqiang/rom/rd03v2/miwifi_rd03v2_firmware_db7d3_2.0.11.bin
Just one more “lucky” confirmation of receiving the RD03v2: Help to install openWRT on Xiaomi AX3000T - #23 by reyur
It looks like RD23 is going to become popular again 