ZTE F601 V9 – GPON SN not found in flash, stored in chipset?

  • Device: ZTE F601 V9
  • Firmware: 9.0.10.P1N9
  • Access: Telnet enabled

What I did:

  • Dumped all MTD partitions (mtd0–mtd6)
  • Searched full flash for:
    • ASCII SN (ZTEGxxxx)
    • HEX values
    • Partial matches

Result:

  • SN not found anywhere in flash

Question:

  • Is SN stored in GPON chipset internal memory on this model?
  • Any known method to modify it?

Tried:

  • Hex editing
  • TFTP
  • SPI dump
  • Factory mode tools

Goal:

  • Change GPON SN for ISP authentication
  • please help