Sercomm JCOW414 (Reliance JioFiber Home Gateway)

The Sercomm JCOW414 is a dual-band Wi-Fi home gateway distributed by Reliance Jio (JioFiber) in India. It is powered by the EcoNet / Airoha EN7528HU dual-core MIPS processor and features dual-band MediaTek Wi-Fi.

This page documents the community OpenWrt port, complete hardware specifications, and network-based flashing procedures without opening the router casing.

* OpenWrt Firmware Repository: Asjohn720/jiofiber-jcow414-openwrt

Note: No router disassembly or soldering is required. Flashing is performed entirely over the network using the stock web panel and root Telnet shell.

Newer Jio firmware versions (R2.41 / R2.52) lock the root account with randomized passwords. Downgrading to R2.15 allows decrypting the configuration backup, injecting a payload that starts a root Telnet server, and setting the root password.

1. Downgrade to R2.15 (if needed): Download stock R2.15 img and sig files and flash via web interface: Administrator → Maintenance → Firmware Upgrade.
2. Download Backup: Navigate to Maintenance → Backup/Restore and click Backup. Your browser will download a file named like RSVXXXXXXXXXXX_JCOW414.enc.
3. Inject Root Payload: Run the unlocker script from the tools folder:
   • Windows: Drag & drop your .enc file onto JioFiber_Universal_Root_Unlocker_For_Windows.bat.
   • Linux / macOS: Run python3 JioFiber_Universal_Root_Unlocker_For_Linux_Mac.py.
   • This creates backup_root_ready.enc.
4. Restore Patched Backup: In the router panel, upload backup_root_ready.enc under Restore.
   • Notice: The router will display “Failed to update configuration (checksum error)”. This is expected: the injected payload executes in RAM as root before the checksum verification.
5. Connect via Telnet:

telnet 192.168.29.1 23
# Username: root
# Password: password

1. Download the pre-built OpenWrt image (openwrt-*-tclinux.trx) from GitHub Releases.
2. On your PC, open a terminal in the folder containing the .trx file and start a local HTTP server:

python -m http.server 8000

1. In your router's Telnet shell, download the firmware into RAM (/tmp):

cd /tmp
wget http://<YOUR_PC_IP>:8000/openwrt-jiofiber_jcow414.trx -O openwrt.trx

1. Flash the image into Bank 1 (tclinux) using the force (-f) flag:

# The -f flag bypasses the stock Broadcom TRX header check
mtd -f write /tmp/openwrt.trx tclinux

Switch the hardware boot flag so the bootloader launches Bank 1:

/usr/bin/sys bootflag swap
reboot

After reboot, OpenWrt is accessible at 192.168.1.1 with the LuCI web interface.

A 4-pin 2.54mm UART serial pinout is present on the PCB:

* Baud rate: 115200 * Data bits: 8 * Parity: None * Stop bits: 1 * Flow control: None * Logic Level: 3.3V TTL

The router features hardware dual-bank flash protection: * Bank 0 (tclinux_slave): Factory stock JioFiber firmware. * Bank 1 (tclinux): OpenWrt firmware.

If you ever need to restore the stock firmware, you can connect via Serial UART (or Telnet if available) and switch the bootflag back:

/usr/bin/sys bootflag swap
reboot

The bootloader will cleanly boot back into stock firmware without bricking.