Line 7: |
Line 7: |
| ==Changelog== | | ==Changelog== |
| <!--NEW_FW--> | | <!--NEW_FW--> |
| + | ===<b><span class="plainlinks">[https://firmware.teltonika-networks.com/7.7.2/TCR1/TCR1_R_00.07.07.2_WEBUI.bin TCR1_R_00.07.07.2]</span></b> | 2024.06.12=== |
| + | * <b>Improvements</b> |
| + | ** <b>Network</b> |
| + | *** Zerotier: added backup WAN interface blacklisting if WAN failover is enabled |
| + | *** Mobile: improved communication stability with eSIM |
| + | ** <b>Services</b> |
| + | *** SNMP: added bruteforce attack prevention when using SNMP v3 user |
| + | *** L2TP: improved reconnect attempt logic |
| + | *** Wireless: removed unnecessary information from system logs |
| + | ** <b>System</b> |
| + | *** SSH: removed weak SSH algorithms |
| + | *** Telnet: moved to Package Manager |
| + | * <b>Fix</b> |
| + | ** <b>Network</b> |
| + | *** BGP: fixed instance migration issues |
| + | *** Mobile: fixed forced APN configuration |
| + | ** <b>Services</b> |
| + | *** DMVPN: fixed duplicate NHRP map entries creation |
| + | *** OpenVPN: added fixes for the insecure tls-cert-profile option usage |
| + | ** <b>System</b> |
| + | *** IP Block: fixed blocking of UDP traffic |
| + | *** Ledman: fixed WiFi LED indication when WiFi configuration is changed |
| + | *** Uboot: fixed firmware recovery update via uboot on Windows |
| + | * <b>CVE Patches</b> |
| + | ** CVE-2024-31948 |
| + | ---- |
| + | ===<b><span class="plainlinks">[https://firmware.teltonika-networks.com/7.7.1/TCR1/TCR1_R_00.07.07.1_WEBUI.bin TCR1_R_00.07.07.1]</span></b> | 2024.05.03=== |
| + | * <b>New</b> |
| + | ** <b>Network</b> |
| + | *** WebUI: added ESM/EMM message notifications |
| + | *** WebUI: added internet status tracking configuration and overview widget |
| + | *** LAN: added a new IPv6 LAN status page |
| + | *** Static Leases: added a new IPv6 Static Leases page |
| + | *** WebUI: added custom domain name resolve option in “DNS” configuration page |
| + | *** Auto APN: added “uno.au-net.ne.jp” APN for “KDDI” operator |
| + | *** Auto APN: added 'eprivate010.tisparkle.com' APN for “Sparkle” operator |
| + | *** QoS: added mobile interface select option |
| + | *** Mobile: improved connection establish time for uqmi protocol |
| + | *** Failover: added additional connection flush options |
| + | *** Wireless: added auto-reconnect disable functionality |
| + | *** Wireless: added ability to use PKCS#12 certificates for EAP-TLS authentication |
| + | *** VRF: added initial Virtual Routing and Forwarding support |
| + | ** <b>Services</b> |
| + | *** DLMS Client: added persistent TCP connections |
| + | *** Events Reporting: added unexpected shutdown event |
| + | *** Modbus Client: added 64bit data types |
| + | *** IPerf3: added iPerf3 to Package Manager |
| + | *** TR-069: added PCI, LAC, TAC, EARFCN and Neighbour cells data to Device.MobileInfo node |
| + | *** Hotspot: added domain and subdomain options for external landing page |
| + | ** <b>System</b> |
| + | *** WebUI: added the ability to generate random passwords for password input fields |
| + | *** WebUI: added reset to “Factory defaults” option |
| + | *** System: changed firmware certificate verification tool |
| + | *** IP Block: added time-based login attempt blocking |
| + | *** WebUI: added firmware update notification support |
| + | *** PAM: added the ability to set port for TACACS+ |
| + | *** Logging: added multiple remote syslog servers support |
| + | * <b>Improvements</b> |
| + | ** <b>Network</b> |
| + | *** Static Leases: added possibility to use MAC with wildcard |
| + | *** WebUI: added ability to disable modem update notifications |
| + | *** Topology: changed network devices scanning application |
| + | *** WebUI: improved design of Status - LAN page |
| + | *** DHCP: simplified DHCP configurations in other pages and moved full DHCP configuration to a separate page |
| + | *** WDHCP: removed default disabled server configuration for WAN interface |
| + | *** WebUI: simplified data entry of DNS forwardings by separating hostname and IP address fields |
| + | *** BGP: added Virtual Routing and Forwarding (VRF) support |
| + | *** BGP: added multiple BGP instance support |
| + | *** WebUI: adjusted responsive design breakpoints |
| + | *** WebUI: added additional field for warning threshold to allow entering value as percentage in Mobile Data Limit section |
| + | *** Mobile: improved mobile services stability when SIM card is lost during SMS sending |
| + | *** Mobile: updated bridge/passthrough mode logic to flush ARP and add static ARP entry if MAC is specified |
| + | *** Mobile: improved SIM switch logging and protection on failure to acquire data |
| + | *** WebUI: added partial data loading to APN database page |
| + | *** Mobile: improved SMS sending timeouts during network issues |
| + | *** Mobile: improved connection handling when data limit is reached |
| + | *** Mobile: added metric to default gateway when using passthrough mode |
| + | *** WebUI: added validation for 2 same APNs |
| + | *** WebUI: updated Band selection field to show duplex modes in Mobile General page |
| + | *** WebUI: added an information icon and disabled delete button for wireless instance when it is associated with a hotspot interface |
| + | *** Wireless: improved hidden AP handling when showing scan results |
| + | *** Wireless: added a range of channels to 5 Ghz radio to use as fallback if it drops after radar detection when using DFS channel |
| + | *** Dnsmasq: updated dnsmasq to version 2.89 |
| + | ** <b>Services</b> |
| + | *** Wireguard: added option to bind tunnel to a specific interface |
| + | *** OPC UA Client: added limits (10 servers, 20 groups, 50 nodes per server, 50 values per group) |
| + | *** DLMS Client: increased maximum count of connection sections to 30 |
| + | *** DLMS Client: added short name referencing |
| + | *** SNMP: set strict default community access when IPv6 address is used |
| + | *** SNMP: improved sysName OID to set device's hostname |
| + | *** Auto Reply: added available SMS message parameters to "Message text" input |
| + | *** Modbus Client: allow using diacritics in SMS alarms |
| + | *** Hotspot: moved MAC blocking option from Access Control to Hotspot page |
| + | *** WebUI: added MAC authentication support when using RADIUS authentication mode |
| + | *** WebUI: moved licenses to footer |
| + | *** OpenVPN: added the bridge option for selecting the network device to be bridged with |
| + | *** OpenVPN: added possibility to create more than one TAP client |
| + | *** SSTP: updated package version to 1.0.19 |
| + | *** Mosquitto: updated package version to 2.0.17 |
| + | ** <b>System</b> |
| + | *** WebUI: added more strict password requirements for restoring backup |
| + | *** SMTP: added option to either not verify SMTP server or upload SMTP server's CA file to verify authenticity |
| + | *** WebUI: Added the ability to choose the ROOT CA when using certificates from the device |
| + | *** WebUI: unified time format to ISO8601 across the entire WebUI |
| + | *** WebUI: added ability to choose imported certificate and key as 'Server certificate' and 'Server key' in 'Access Control' |
| + | *** WebUI: added 'Hosts' and 'IP Addresses' options for 'Simple' certificate generation and certificate signing |
| + | *** WebUI: changed firmware update option to server as a default option |
| + | *** WebUI: improved first login password change logic |
| + | *** Certificates: updated Root CA certificates |
| + | *** GPL: added offline package preparation command for GPL builds |
| + | *** Speedtest: added multiple connections support to improve accuracy |
| + | *** Libcap: updated package version to 2.69 |
| + | * <b>Fix</b> |
| + | ** <b>Network</b> |
| + | *** Topology: fixed showing interfaces with assigned VLAN |
| + | *** WebUI: fixed static routing creation for GRE instance |
| + | *** Network: fixed DHCPv4 relay mode enabling |
| + | *** Mobile: fixed PIN code set after modem restart |
| + | *** Mobile: fixed cases where 5G NSA network type was shown incorrectly |
| + | *** Mobile: fixed an issue where using SIM change command on one SIM slot modems would reset connection |
| + | *** Mobile: fixed an issue where message storage would not be checked correctly |
| + | *** Mobile: fixed temperature value sometimes returning 0 |
| + | *** Mobile: fixed denied roaming flag set |
| + | *** Mobile: fixed issue where RSSI value was displayed as 0 when using 2G/3G network types |
| + | *** Failover: fixed Failover missing active rules when using multiple source and destination IP addresses |
| + | *** Failover: fixed an issue where failover would not function correctly while using a mobile interface |
| + | *** Failover - WebUI: fixed network and failover interface metric sorting synchronization issue |
| + | *** Failover - WebUI: fixed failover rule policy save issue with newly added WAN interface |
| + | *** Interfaces: fixed failover value for new WAN being taken from WAN that was just deleted |
| + | *** Wireless: fixed Wifi Scanner not saving scanned WiFi SSIDs |
| + | *** Wireless: fixed missing CCMP-256 and GCMP-256 cipher types in scan results |
| + | *** Wireless: fixed missing GCMP-256 cipher when using WPA3-EAP encryption in Client mode |
| + | *** Wireless: fixed skipped MAC address value for interface in Client mode |
| + | *** Wireless - WebUI: fixed mesh nodes not being shown in Status->Wireless->Interfaces page |
| + | *** Wireless - WebUI: fixed proposed configuration settings when connecting to a mesh point network |
| + | *** MultiAP: fixed client not switching to another AP if incorrect password was provided |
| + | ** <b>Services</b> |
| + | *** Modbus Client: allow using negative floating point values in requests |
| + | *** Azure IoT Hub: fixed Data to Server minor WebUI dependency bugs |
| + | *** Data to Server: fixed DLMS data formating |
| + | *** Data to Server: fixed Network link state data display |
| + | *** DLMS Client: fixed segfault while reading profile generic COSEM object |
| + | *** DLMS Client: fixed profile generic entries reading |
| + | *** DLMS Client: fixed application memory allocation issues |
| + | *** SSTP: fixed route adding when default route is enabled |
| + | *** SNMP: fixed VLAN OID naming |
| + | *** OpenVPN: added fixes for instance status tracking functionality |
| + | *** OpenVPN: resolved uptime counting issues |
| + | *** PPTP: fixed PPTP instance deletion problem |
| + | *** Azure IoT Hub: fixed 'contentType' telemetry message parameter |
| + | *** Hotspot: fixed password validation for locally created users and signed-up users |
| + | *** Hotspot: fixed session invalidation after deleting registered user |
| + | *** Hotspot: fixed SMS OTP password reuse |
| + | *** Hotspot: fixed firewall rule creation |
| + | *** PPTP: fixed problem related with routes when failover is enabled |
| + | *** Modbus Client: fixed issue where service freezes when SMS alarm is sent |
| + | *** UPnP: updated package version to 2.3.4 |
| + | ** <b>System</b> |
| + | *** Mobile - NTP Client: fixed ‘Count of time synchronizations’ execution when synchronization to mobile operator is chosen |
| + | *** Package Manager: fixed spinner message when restarting network after package upload or download |
| + | *** Package Manager: fixed supported devices check when installing a package from server |
| + | *** WebUI: fixed language install from uploaded package after upgrade with keep settings |
| + | *** WebUI: fixed an issue when a user was not logged out after changing profiles |
| + | *** Telnet: fixed segmentation fault during concurrent connections |
| + | *** CLI: fixed enter key issue on mobile chromium based browsers |
| + | *** System Users: fixed SSH session close after deleting user or disabling SSH access |
| + | *** Profiles: fixed profile migration with installed packages |
| + | *** WebUI: fixed Hotspot log page table search functionality |
| + | *** Speedtest: fix missing download speed on some servers |
| + | *** PAM: updated libpam to version 1.6.0 |
| + | * <b>CVE Patches</b> |
| + | ** CVE-2022-4603 |
| + | ** CVE-2022-23308 |
| + | ** CVE 2022-45061 |
| + | ** CVE-2023-0466 |
| + | ** CVE-2023-6129 |
| + | ** CVE-2023-7042 |
| + | ** CVE 2023-24329 |
| + | ** CVE 2023-27043 |
| + | ** CVE-2023-42366 |
| + | ** CVE-2023-46218 |
| + | ** CVE-2023-46219 |
| + | ** CVE-2023-46752 |
| + | ** CVE-2023-46753 |
| + | ** CVE-2023-48795 |
| + | ** CVE-2024-2397 |
| + | ** CVE-2024-25062 |
| + | ** CVE-2024-27913 |
| + | ** CVE-2024-22365 |
| ===<b>TCR1_R_00.07.06.3</b> | 2024.01.17=== | | ===<b>TCR1_R_00.07.06.3</b> | 2024.01.17=== |
| <b>Note:</b> Firmware version <i>TCR1_R_00.07.06.3</i> was removed due to an issue with mismatching wireless SSID between device housing label and default device SSID on factory configuration. | | <b>Note:</b> Firmware version <i>TCR1_R_00.07.06.3</i> was removed due to an issue with mismatching wireless SSID between device housing label and default device SSID on factory configuration. |