Toshiba / Vestel Engineering Menu - 4725

Here's a quick guide to hacking investigating your TV's engineering menu. This works on all Vestel TVs - including modern Toshiba screens. I've also written about Telnet control of Toshiba Smart TVs.

If you manage to break your TV using this forbidden knowledge, please don't come crying to me for help.

1. Turn on your TV.
2. Switch to an HDMI source. You must not be on a TV menu.
3. Hold down the 0 button until you see the message "Remote controller will control TV"
4. Press the blue 'Home' button on the remote control.
5. Press the following buttons on the remote control number pad, in this order
   • 4
   • 7
   • 2
   • 5

You should be presented with this screen:

The options will vary depending on your TV model.

• Video Settings
  • Whole bunch of things like RF AGC SECAM and ADC Calibration B Offset
  • This is a great way to break your TV.
• Audio Settings
  • Just displays the "Surround Type" - you can't change anything.
• Options 1
  • Power-up settings, hotel mode, volume. Again, read-only.
• Options 2
  • Information about menus, HMDI selection, DCF ID. Yup, nothing to play with.
• Options 3
  • More diagnostic information about smart TV stuff. Includes Alexa Ready state.
• Tuning Settings
  • Tuner type and firmware
• Source Settings
  • Which sources have been enabled
• Diagnostic
  • Remote Control Test - see which buttons you're pressing on the remote
  • Video Pattern Test - pressing right cycles through white, red, green, blue, magenta, turquoise, yellow, grey, black
  • Factory Reset
  • Some more read-only stuff like MAC address
• USB Logging
  • Screen Capture - can be set to Enabled. No idea how to activate it though
  • UART RX - can be Enabled
  • Flash write debug - seems to write a debug list to a USB drive
  • HTTP Test Server - can be Enabled.
  • Export channel list to USB
• USB Operations
  • Only works if you have a USB drive connected - but doesn't seem to do anything.

After turning on the test server, the following ports were exposed:

PORT      STATE SERVICE

2870/tcp  open  daishi

5001/tcp  open  commplex-link

7681/tcp  open  unknown

56183/tcp open  unknown

56789/tcp open  unknown

56790/tcp open  unknown

There are some weird entries in the debug log written to USB:

mbrg_AUDIO_HDMI_MODE_CONFIG : NONPCM mode 

[AUDIO][Utopia]: ===== Check Audio Decoder Protection from hash-key IP =====

[AUDIO][Utopia]: Hash Key Check DD Fail, no DD license!!

[AUDIO][Utopia]: Hash Key Check DDP Fail, no DD+ license!!

[AUDIO][Utopia]: Hash Key Check Dolby MS11 Fail, no Dolby MS11 license!!

[AUDIO][Utopia]: Hash Key Check Dolby MS12 LC profile Fail, no Dolby MS12 LC profile license!!

[AUDIO][Utopia]: Hash-key Support Dolby MS12 D profile.

[AUDIO][Utopia]: Hash Key Check Dolby MS12 B profile Fail, no Dolby MS12 B profile license!!

[AUDIO][Utopia]: Hash Key Check AAC Fail, no any AAC license!!

[AUDIO][Utopia]: Hash Key Check DDCO Fail, no DDCO license!!

[AUDIO][Utopia]: Hash Key Check DTS Fail, no DTS license!!

[AUDIO][Utopia]: Hash-key Support WMA.

[AUDIO][Utopia]: Hash Key Check DRA Fail, no DRA license!!

[AUDIO][Utopia]: Hash Key Check DTSLBR Fail, no DTSLBR license!!

[AUDIO][Utopia]: Hash Key Check DTSE Fail, no DTSE license!!

[AUDIO][Utopia]: Hash Key Check DTSNeoUltra Fail, no DTSNeoUltra license!!

[AUDIO][Utopia]: Hash-key Support SRS_TSHD.

[AUDIO][Utopia]: Hash Key Check SRS_THEATERSOUND Fail, no SRS_THEATERSOUND license!!

[AUDIO][Utopia]: Hash Key Check DTS_StudioSound3D Fail, no DTS_StudioSound3D license!!

[AUDIO][Utopia]: Hash Key Check COOK Fail, no COOK license!!

[AUDIO][Utopia]: Hash-key Support DTS_HD.

[AUDIO][Utopia]: Hash Key Check Dolby volume Fail, no Dolby volume license!!

[AUDIO][Utopia]: Hash Key Check SRS_PURESND Fail, no SRS_PURESND license!!

[AUDIO][Utopia]: Hash Key Check DTS VirtualX Fail, no DTS VirtualX license!!

[AUDIO][Utopia]: Hash Key Check DTS_StudioSound_II Fail, no DTS_StudioSound_II license !!

[AUDIO][Utopia]: ===== Check Protection IP End                         =====

Right, that's it. Hope that's of use to someone.