View source for RUTM20 Firmware Downloads

{{Template: Networking_rutos_firmware_downloads
<!------------------------DEVICE----------------------->
| name         = RUTM20
| series       = RUTM
}}

==Changelog==
<!--NEW_FW-->
===<b><span class="plainlinks">[https://firmware.teltonika-networks.com/7.20.1/RUTM/RUTM_R_00.07.20.1_WEBUI.bin RUTM_R_00.07.20.1]</span></b> | 2026.01.05===
* <b>Fix</b>
** <b>System</b>
*** Boot: fixed WAN ethernet led behaviour during boot on devices with specific hardware version
** <b>Services</b>
*** DDNS-scripts: improved core handling of user input

----
===<b><span class="plainlinks">[https://firmware.teltonika-networks.com/7.20/RUTM/RUTM_R_00.07.20_WEBUI.bin RUTM_R_00.07.20]</span></b> | 2025.12.16===
* <b>New</b>
** <b>Network</b>
*** Mobile: added "mobileinternet.tele2.lt" APN for "Tele2" operator to APN database
*** Wireless: added support for a global installation type option for radio devices
** <b>Services</b>
*** Data to Server: added IEC 60870-5 Client as an input
*** IEC 60870-5 Client: added IEC 60870-5-104 Client
*** IEC 60870-5 Server: added IEC101 and IEC104 support
** <b>System</b>
*** Package Manager: added CIFS/SMBFS filesystem support
* <b>Improvements</b>
** <b>Network</b>
*** 802.1X Client: updated 802.1x validation so that 802.1x client can no longer be enabled on a port that is disabled
*** 802.1X Server: updated 802.1x validation so that 802.1x server can no longer be enabled on a port that is disabled
*** DHCP server: improved "DHCPv6-Mode" field's option names and hints
*** Mobile: improved log message when no primary SIM is set
*** Mobile: improved DFOTA log message when checking for updates
*** Mobile: added creation of mobile network interface on eSIM profile installation if one does not exist
*** Mobile: added "Switch to next SIM" button in 'Status -> Mobile' page
*** Mobile: improved mobile data connection establishment time
*** Mobile: improved mobile connection bring up behavior when the "Service option not subscribed" error is received
*** Multi WAN: added IPv4 and IPv6 WAN interface coexistence warning
*** Network: improved "Force link" field hint
*** Network: fixed "Force link" field to respect default value when changing interface protocol
*** SSHFS: updated setting fields to be shown when service is disabled
*** SSHFS: added directory as prefix to "Mount point" field
*** ethtool: updated version to 6.10
** <b>Services</b>
*** AWS IoT Core: updated orange error status to be red
*** Azure IoT Hub: updated status columns to use text badges instead of circle icons
*** Data to Server: updated input sections to be toggleable
*** Data to Server: added certificates to global certificate manager
*** Data to Server: increased the limit for Modbus data filtering entries
*** Event juggler: added certificates to global certificate manager
*** I/O Juggler: added certificates to global certificate manager
*** I/O Status: moved all custom I/O configuration from table to the edit
*** I/O Status: updated all I/O pinout and Power pinout icons
*** L2TP: improved adding custom options to the configuration

*** MQTT Broker: added certificates to global certificate manager
*** MQTT Broker Bridge: added certificates to global certificate manager
*** MQTT Publisher: added certificates to global certificate manager
*** SMPP: added certificates to global certificate manager
*** SNMP: added additional info to Trap message
** <b>System</b>
*** Certificates: changed SCEP enrollment to try AES first and fall back to 3DES
*** RutOS: updated login banner to include internal API usage
*** Kernel: updated version to 6.6.115
* <b>Fix</b>
** <b>Network</b>
*** 802.1X Client: fixed incorrectly displaying port link state
*** Firewall: removed low contrast zone colors
*** Mobile: fixed failure to create network interface configuration section for a new eSIM profile
*** Mobile: fixed SMS Limit excessive logging
*** Network: fixed PPPoE client options not being removed after switching to other protocol
*** Network: fixed routing table rules not matching interface metric order
*** Realtime Traffic: fixed traffic history not showing up in some cases
*** Realtime Traffic: fixed plot background rendering when switching between plots
*** Realtime Traffic: fixed plot popover position on Firefox 143 and later
*** Wireless: fixed latency spikes after wireless roam
*** Wireless: fixed authentication timeout during fast transition
*** Wireless: fixed retrieving empty cached wireless scan results
** <b>Services</b>
*** Azure IoT Hub: fixed empty status hint
*** DNP3 Client: fixed display issues with long request names
*** DNP3 Outstation: fixed display issues with long request names
*** Dynamic DNS: fixed bind-nsupdate method not working on multi-level subdomains
*** Event juggler: fixed HTTP action request type
*** Hotspot: fixed session data delete when deleting user
*** IPsec: fixed unstable connections with software flow offloading enabled
*** L2TP: fixed log display in WebUI
*** Modbus Client: fixed duplicate query parameters validation in database entries endpoint
*** Modbus Client: fixed display issues with long request names
*** Modbus Server: fixed display issues with long request names
*** MQTT Broker: fixed 'Allow persistence' option
*** OPC UA Client: fixed duplicate query parameters validation in database entries endpoint
*** OPC UA Client: fixed API error when 'server_node' option had an incorrect type in group values test endpoint
*** OpenVPN: fixed status in Static Key Authentication mode
*** OpenVPN: fixed handling of 'user' and 'group' parameters
*** RMS: fixed connection status jumping between "Connecting" and "Connected" states
*** SMS Utilities: fixed script action execution when arguments are provided
** <b>System</b>
*** Certificates: fixed importing DER keys to TPM
*** RutOS: fixed rare UCI deadlock causing system hangs
*** Speed Test: fixed selecting WAN interface when using servers with IPv6 support
*** System Users: fixed redundant /etc/group member creation
*** WebUI: fixed target area that triggers hint text
* <b>CVE Patches</b>
** CVE-2025-46394 - 3.3 (LOW)
----
===<b><span class="plainlinks">[https://firmware.teltonika-networks.com/7.19.4/RUTM/RUTM_R_00.07.19.4_WEBUI.bin RUTM_R_00.07.19.4]</span></b> | 2025.12.05===
* <b>Fix</b>
** <b>Network</b>
*** Mobile: fixed operator selection under specific conditions

----
===<b><span class="plainlinks">[https://firmware.teltonika-networks.com/7.19.2/RUTM/RUTM_R_00.07.19.2_WEBUI.bin RUTM_R_00.07.19.2]</span></b> | 2025.11.26===
* <b>Fix</b>
** <b>System</b>
*** Update Firmware: fixed firmware download cancellation
----
===<b><span class="plainlinks">[https://firmware.teltonika-networks.com/7.19.1/RUTM/RUTM_R_00.07.19.1_WEBUI.bin RUTM_R_00.07.19.1]</span></b> | 2025.11.12===
* <b>Fix</b>
** <b>System</b>
*** WebUI: fixed unresponsive navigation after password change
----
===<b><span class="plainlinks">[https://firmware.teltonika-networks.com/7.19/RUTM/RUTM_R_00.07.19_WEBUI.bin RUTM_R_00.07.19]</span></b> | 2025.11.06===
* <b>New</b>
** <b>Network</b>
*** Mobile: added "web.unomobile.it" APN for "1Mobile" operator to APN database
* <b>Improvements</b>
** <b>Network</b>
*** DHCP server: added message to Events Log when there are no available DHCP addresses
*** Firewall: added status to Traffic Rule page
*** Firewall: added status to Port Forwards page
*** Firewall: added status to NAT page
*** Firewall: added status to DMZ page
*** Firewall: updated status page to have chain and rule tables for better searchability
*** Firewall: added shortcuts from firewall rules in status page to firewall configurations that created them
*** HTTPS DNS Proxy: disabled field requirements when service is disabled
*** Mobile: improved mobile operator parsing for connection establishment
*** Mobile: added support for eSIM to Mobile Usage page
*** Mobile: updated default SIM selection in Mobile General page
*** Mobile: added switch to disable local DHCPv4 leases when operating in bridge mode
*** Mobile: added more information about SIM state changes in logs
*** Mobile: improved error handling during mobile data connection bringup
*** NAT64: added status to NAT64 page
*** Network: improved DHCP client and server related fields
** <b>Services</b>
*** Cloud of Things: changed communication from HTTP to MQTT
*** Cumulocity: changed communication from HTTP to MQTT
*** Data to Server: added new parameters (Custom name and pin value) in I/O input plugin
*** EoIP: added IPv6 support
*** Event juggler: added `io_reset` option
*** GRE: added IPv6 support
*** Impulse Counter: increased status loading speed
*** MQTT Modbus Gateway: added validation to discard responses with invalid ID or function code
*** OpenVPN: improved page load speed by removing duplicate data request
*** SNMP: added SET support for universal gateway tag value table
*** Stunnel: added support for using IPv6 addresses in the connect IPs field
*** Wireguard: added wireguard watchdog support
*** cURL: updated version to 8.16.0
*** OpenVPN: updated version to 2.6.14
** <b>System</b>
*** Custom Scripts: added page loading spinner
*** Speed Test: added support for custom server url
*** Update Firmware: improved FOTA communication and caching logic
*** WebUI: improved usability on small screens
*** Kernel: updated version to 6.6.108
*** PAM: updated version to 1.7.1
* <b>Fix</b>
** <b>Network</b>
*** DHCP server: fixed DHCPv6 server reload when changing VLAN
*** DNS: fixed "Static addresses" and "Custom redirect" field required validation
*** Dynamic routes: fixed services other than EIGRP restarting on network change
*** Firewall: added IPsec and OpenConnect configurations as possible networks
*** Firewall: fixed NAT extra custom rules not applying after FW upgrade
*** HTTPS DNS Proxy: fixed DNS requests failing after obtaining new IP
*** Mobile: fixed informational messages when SIM configuration is not found
*** Mobile: fixed configuration files after ESIM deletion
*** Mobile: fixed IPv4/IPv6 type mobile reconnection loop if one type has unsuccessful connection
*** Mobile: fixed updating modem firmware when custom root CA is configured
*** Mobile: fixed eSIM profile display for profiles without provider value
*** Mobile: fixed missing modem firmware version after modem firmware update
*** Multi WAN: fixed Multi WAN interface creation
*** Wireless: fixed invalid mesh interface encryption data reporting
*** Wireless: fixed excessive Wi-Fi service log file creation due to service restarts
*** Wireless: fixed "Allow legacy 802.11b rates" option not working properly
*** Wireless: fixed missing background scan data in learn mode
** <b>Services</b>
*** DLMS: fixed access error when reading an empty sort object attribute on a generic profile object
*** DLMS: fixed "Entries" not being clamped for "Profile generic" COSEM type
*** DMVPN: fixed custom changes in IPsec, GRE and NHRP pages being reverted when saving DMVPN instance
*** DNP3 Client: fixed dnp3 test function printing analog values in wrong format
*** DNP3 Client: fixed always shown warning notification by displaying status hints for affected requests
*** Dynamic DNS: fixed "Check interval" and "Force interval" validation issues
*** Email to SMS: fixed process hang during email handling
*** Impulse Counter: fixed duplicate values in 'GPIO pin' dropdown
*** Impulse Counter: fixed deleting impulse counter data records
*** IPsec: fixed an issue where connections could be re-initiated even while being active
*** IPsec: fixed authentication issue when using multiple instances with the PSK authentication method
*** IPsec: fixed Xauth connections not establishing when identifiers are set
*** IPsec: fixed wrong active client information when using certificates
*** IPsec: fixed incorrect uptime display when using multiple responder instances
*** L2TP: fixed L2TP over IPsec connection issue
*** L2TPv3: fixed parameter validation for IPv6 addresses in configuration
*** Modbus Client: fixed email and MQTT alarm actions running longer than intended
*** Modbus Client: fixed always shown warning notification by displaying status hints for affected requests
*** Modbus Client: fixed test request endpoints failing if 'broadcast' option is not provided
*** MQTT Broker: fixed TLSv1.1 configuration
*** OpenConnect: fixed 'Get server fingerprint' feature on IPv6 servers
*** OpenConnect: fixed displaying IPv6 address under Tunnel IP address
*** OpenVPN: fixed parsing uploaded custom OpenVPN configuration
*** OpenVPN: fixed issues with parsed fields being displayed after config deletion
*** OpenVPN: fixed configuration parsing issues related to security options
*** SMS Forwarding: fixed certificate verification disabling
*** Wireguard: fixed creation of routes to endpoint host when default route is not set
** <b>System</b>
*** Access Control: fixed displaying certificates in "HTTPS" edit modal after page refresh
*** Administration: fixed incorrect creation date of user's default configuration
*** API Core: fixed API error on 'DELETE' request with bad payload structure
*** Events Log: fixed sorting reset functionality of table columns and "Event group" column issues
*** Setup Wizard: fixed redirect of "RMS" step
*** System Users: fixed multiple network pages working improperly with non-root users
*** WebUI: fixed "visible columns" button to be clickable for users without "write" permissions
*** WebUI: removed bell notifications from modals
*** WebUI: fixed length validation for custom input values in select lists
*** WebUI: fixed active state of filters on tables
* <b>CVE Patches</b>
** CVE-2025-4373 - 4.8 (MEDIUM)
** CVE-2025-6020 - 7.8 (HIGH)
** CVE-2025-6052 - 7.5 (HIGH)
----
===<b><span class="plainlinks">[https://firmware.teltonika-networks.com/7.18.3/RUTM/RUTM_R_00.07.18.3_WEBUI.bin RUTM_R_00.07.18.3]</span></b> | 2025.10.30===
* Initial firmware release
----