Link to this heading4G LTE mobile hotspot

Original Program has a way to switch the device into debug mode. By reverse engineering the button it does a Direct SCSI using the sg_raw command.

Source