OTD144 Firmware Downloads: Difference between revisions

Latest revision as of 14:02, 16 December 2025

Main Page > OTD Outdoor routers > OTD144 > OTD144 Firmware Downloads

This page contains firmware files for OTD144 devices. Look to the table below or the changelog to find download links.

Stable firmware - this version has been tested through both internal QA processes and large-scale user deployments. All known issues have been resolved based on user reports and testing feedback. Stable firmware is currently used as the default for updates and is also deployed in mass production. To upgrade firmware using WebUI, follow the instructions in OTD144 Firmware.
Latest firmware - this is the most recent firmware release, featuring the latest updates, features, and fixes. While it has passed internal testing, it has not yet undergone widespread deployment or user validation. It may still contain undiscovered issues. We recommend testing on a small number of devices before considering broader updates.

Note: packages for Package Manager are independent from firmware and can be downloaded in the Package Downloads page.

OTD144

File	Type	Release date	Size	MD5	Links
RUTE_R_00.07.18.3_WEBUI.bin	Stable FW	2025.10.30	16 MB	61b4730756fdf09a925676c17968a3cc	Changelog API
RUTE_R_00.07.20_WEBUI.bin	Latest FW	2025.12.16	18 MB	5775aca1347f37e0d908d281040c25a7	Changelog API
RUTE_R_SDK_00.07.20.tar.gz	SDK	2025.12.16	48 MB	6829805be736841c241c78ac16178a07

FW checksums

Checksums for firmware files can be found here.

Changelog

RUTE_R_00.07.20 | 2025.12.16

New
- Network
  - Mobile: added "mobileinternet.tele2.lt" APN for "Tele2" operator to APN database
  - Wireless: added support for a global installation type option for radio devices
- Services
  - Data to Server: added IEC 60870-5 Client as an input
  - IEC 60870-5 Client: added IEC 60870-5-104 Client
  - IEC 60870-5 Server: added IEC101 and IEC104 support
- System
  - Package Manager: added CIFS/SMBFS filesystem support
Improvements
- Network
  - 802.1X Client: updated 802.1x validation so that 802.1x client can no longer be enabled on a port that is disabled
  - 802.1X Server: updated 802.1x validation so that 802.1x server can no longer be enabled on a port that is disabled
  - DHCP server: improved "DHCPv6-Mode" field's option names and hints
  - Mobile: improved log message when no primary SIM is set
  - Mobile: improved DFOTA log message when checking for updates
  - Mobile: added "Switch to next SIM" button in 'Status -> Mobile' page
  - Mobile: improved mobile data connection establishment time
  - Mobile: improved mobile connection bring up behavior when the "Service option not subscribed" error is received
  - Multi WAN: added IPv4 and IPv6 WAN interface coexistence warning
  - Network: improved interface creation and deletion speed in some situations
  - Network: improved "Force link" field hint
  - Network: fixed "Force link" field to respect default value when changing interface protocol
  - SSHFS: updated setting fields to be shown when service is disabled
  - SSHFS: added directory as prefix to "Mount point" field
  - ethtool: updated version to 6.10
- Services
  - AWS IoT Core: updated orange error status to be red
  - Azure IoT Hub: updated status columns to use text badges instead of circle icons
  - Data to Server: updated input sections to be toggleable
  - Data to Server: added certificates to global certificate manager
  - Data to Server: increased the limit for Modbus data filtering entries
  - Event juggler: added certificates to global certificate manager
  - L2TP: improved adding custom options to the configuration

- - MQTT Broker: added certificates to global certificate manager
  - MQTT Broker Bridge: added certificates to global certificate manager
  - MQTT Publisher: added certificates to global certificate manager
  - SMPP: added certificates to global certificate manager
  - SNMP: added additional info to Trap message
- System
  - Certificates: changed SCEP enrollment to try AES first and fall back to 3DES
  - Kernel: enabled core-dump support in the kernel
  - RutOS: updated login banner to include internal API usage
  - Kernel: updated version to 5.15.196
Fix
- Network
  - 802.1X Server: fixed sporadic log error while installing 802.1x package
  - Firewall: removed low contrast zone colors
  - Mobile: fixed SMS Limit excessive logging
  - Network: fixed PPPoE client options not being removed after switching to other protocol
  - Network: fixed routing table rules not matching interface metric order
  - Realtime Traffic: fixed traffic history not showing up in some cases
  - Realtime Traffic: fixed plot background rendering when switching between plots
  - Realtime Traffic: fixed plot popover position on Firefox 143 and later
  - Wireless: fixed authentication timeout during fast transition
  - Wireless: fixed retrieving empty cached wireless scan results
- Services
  - Azure IoT Hub: fixed empty status hint
  - DNP3 Client: fixed display issues with long request names
  - DNP3 Outstation: fixed display issues with long request names
  - Dynamic DNS: fixed bind-nsupdate method not working on multi-level subdomains
  - Event juggler: fixed HTTP action request type
  - Hotspot: fixed session data delete when deleting user
  - L2TP: fixed log display in WebUI
  - Modbus Client: fixed duplicate query parameters validation in database entries endpoint
  - Modbus Client: fixed display issues with long request names
  - Modbus Server: fixed display issues with long request names
  - MQTT Broker: fixed 'Allow persistence' option
  - OPC UA Client: fixed duplicate query parameters validation in database entries endpoint
  - OPC UA Client: fixed API error when 'server_node' option had an incorrect type in group values test endpoint
  - OpenVPN: fixed status in Static Key Authentication mode
  - OpenVPN: fixed handling of 'user' and 'group' parameters
  - RMS: fixed connection status jumping between "Connecting" and "Connected" states
  - SMS Utilities: fixed script action execution when arguments are provided
- System
  - Certificates: fixed importing DER keys to TPM
  - RutOS: fixed rare UCI deadlock causing system hangs
  - Speed Test: fixed selecting WAN interface when using servers with IPv6 support
  - System Users: fixed redundant /etc/group member creation
  - WebUI: fixed target area that triggers hint text
CVE Patches
- CVE-2025-46394 - 3.3 (LOW)

RUTE_R_00.07.19.4 | 2025.12.05

Fix
- Network
  - Mobile: fixed operator selection under specific conditions

RUTE_R_00.07.19.2 | 2025.11.26

Fix
- System
  - Update Firmware: fixed firmware download cancellation

RUTE_R_00.07.19.1 | 2025.11.12

Fix
- System
  - Administration: fixed displaying bootloader version
  - WebUI: fixed unresponsive navigation after password change

RUTE_R_00.07.19 | 2025.11.06

New
- Network
  - Mobile: added "web.unomobile.it" APN for "1Mobile" operator to APN database
Improvements
- Network
  - DHCP server: added message to Events Log when there are no available DHCP addresses
  - Firewall: added status to Traffic Rule page
  - Firewall: added status to Port Forwards page
  - Firewall: added status to NAT page
  - Firewall: added status to DMZ page
  - Firewall: updated status page to have chain and rule tables for better searchability
  - Firewall: added shortcuts from firewall rules in status page to firewall configurations that created them
  - HTTPS DNS Proxy: disabled field requirements when service is disabled
  - Mobile: improved mobile operator parsing for connection establishment
  - Mobile: updated default SIM selection in Mobile General page
  - Mobile: added switch to disable local DHCPv4 leases when operating in bridge mode
  - Mobile: added more information about SIM state changes in logs
  - Mobile: improved error handling during mobile data connection bringup
  - Network: improved DHCP client and server related fields
  - VLAN: improved VLAN configuration save and apply speed in some cases
- Services
  - Cloud of Things: changed communication from HTTP to MQTT
  - Cumulocity: changed communication from HTTP to MQTT
  - EoIP: added IPv6 support
  - Event juggler: added `io_reset` option
  - Events reporting: moved Events reporting service to Package manager
  - GRE: added IPv6 support
  - MQTT Modbus Gateway: added validation to discard responses with invalid ID or function code
  - OpenVPN: improved page load speed by removing duplicate data request
  - OpenVPN: moved OpenVPN DCO kernel module to package manager
  - SNMP: added SET support for universal gateway tag value table
  - Stunnel: added support for using IPv6 addresses in the connect IPs field
  - Wireguard: added wireguard watchdog support
  - cURL: updated version to 8.16.0
  - OpenVPN: updated version to 2.6.14
- System
  - Custom Scripts: added page loading spinner
  - Speed Test: added support for custom server url
  - Update Firmware: improved FOTA communication and caching logic
  - WebUI: improved usability on small screens
  - Kernel: updated version to 5.15.193
  - PAM: updated version to 1.7.1
Fix
- Network
  - DHCP server: fixed DHCPv6 server reload when changing VLAN
  - DNS: fixed "Static addresses" and "Custom redirect" field required validation
  - Dynamic routes: fixed services other than EIGRP restarting on network change
  - Firewall: added IPsec and OpenConnect configurations as possible networks
  - Firewall: fixed NAT extra custom rules not applying after FW upgrade
  - HTTPS DNS Proxy: fixed DNS requests failing after obtaining new IP
  - Mobile: fixed informational messages when SIM configuration is not found
  - Mobile: fixed IPv4/IPv6 type mobile reconnection loop if one type has unsuccessful connection
  - Mobile: fixed updating modem firmware when custom root CA is configured
  - Mobile: fixed missing modem firmware version after modem firmware update
  - Multi WAN: fixed Multi WAN interface creation
  - Ports Settings: fixed ports re-enabling themselves after changing certain settings
  - Wireless: fixed invalid mesh interface encryption data reporting
  - Wireless: fixed excessive Wi-Fi service log file creation due to service restarts
  - Wireless: fixed "Allow legacy 802.11b rates" option not working properly
  - Wireless: fixed missing background scan data in learn mode
- Services
  - DLMS: fixed access error when reading an empty sort object attribute on a generic profile object
  - DLMS: fixed "Entries" not being clamped for "Profile generic" COSEM type
  - DMVPN: fixed custom changes in IPsec, GRE and NHRP pages being reverted when saving DMVPN instance
  - DNP3 Client: fixed dnp3 test function printing analog values in wrong format
  - DNP3 Client: fixed always shown warning notification by displaying status hints for affected requests
  - Dynamic DNS: fixed "Check interval" and "Force interval" validation issues
  - Email to SMS: fixed process hang during email handling
  - IPsec: fixed an issue where connections could be re-initiated even while being active
  - IPsec: fixed authentication issue when using multiple instances with the PSK authentication method
  - IPsec: fixed Xauth connections not establishing when identifiers are set
  - IPsec: fixed wrong active client information when using certificates
  - IPsec: fixed incorrect uptime display when using multiple responder instances
  - L2TP: fixed L2TP over IPsec connection issue
  - L2TPv3: fixed parameter validation for IPv6 addresses in configuration
  - Modbus Client: fixed email and MQTT alarm actions running longer than intended
  - Modbus Client: fixed always shown warning notification by displaying status hints for affected requests
  - Modbus Client: fixed test request endpoints failing if 'broadcast' option is not provided
  - MQTT Broker: fixed TLSv1.1 configuration
  - OpenVPN: fixed parsing uploaded custom OpenVPN configuration
  - OpenVPN: fixed issues with parsed fields being displayed after config deletion
  - OpenVPN: fixed configuration parsing issues related to security options
  - SMS Forwarding: fixed certificate verification disabling
  - Wireguard: fixed creation of routes to endpoint host when default route is not set
- System
  - Access Control: fixed displaying certificates in "HTTPS" edit modal after page refresh
  - Administration: fixed incorrect creation date of user's default configuration
  - API Core: fixed API error on 'DELETE' request with bad payload structure
  - Events Log: fixed sorting reset functionality of table columns and "Event group" column issues
  - Setup Wizard: fixed redirect of "RMS" step
  - System Users: fixed multiple network pages working improperly with non-root users
  - WebUI: fixed "visible columns" button to be clickable for users without "write" permissions
  - WebUI: removed bell notifications from modals
  - WebUI: fixed length validation for custom input values in select lists
  - WebUI: fixed active state of filters on tables
CVE Patches
- CVE-2025-4373 - 4.8 (MEDIUM)
- CVE-2025-6020 - 7.8 (HIGH)
- CVE-2025-6052 - 7.5 (HIGH)

RUTE_R_00.07.18.3 | 2025.10.30

Improvements
- System
  - ubus: updated version to 2025-10-19
Fix
- System
  - Backup: fixed issues uploading older backup files

RUTE_R_00.07.18.2 | 2025.10.22

Fix
- Services
  - IPsec: fixed issue where IPsec connections failed during WAN failover
  - OpenVPN: fixed status issue after firmware upgrade

RUTE_R_00.07.18.1 | 2025.10.13

Fix
- Network
  - Mobile: fixed operator selection under specific conditions

RUTE_R_00.07.18 | 2025.10.01

Note: This firmware version has been withdrawn due to an issue with incorrect mobile operator selection under specific conditions.

New
- Network
  - Mobile: added historical signal information display
  - Mobile: added "internet" APN for "Telenor" operator to APN database
Improvements
- Network
  - Channel Analysis: removed low contrast color from possible figure colors
  - Channel Analysis: added diamond decoration showing primary channel position
  - DHCP server: added option 82 support to DHCP relay
  - Mobile: added SIM switch historical data
  - Mobile: improved SIM switch status information
  - SSHFS: updated mount point location
  - Dnsmasq: updated version to 2.90
  - Iperf3: updated version to 3.19.1
- Services
  - DLMS: improved COSEM value reading speed
  - DNP3 Client: added DNP3 client support for universal gateway
  - DNP3 Outstation: increased status report responsiveness
  - IPsec: added requirement for local certificate and key fields when X.509 authentication method is selected
  - IPsec: added improvements for IPv6 support
  - Modbus Client: increased test button and status report responsiveness
  - Modbus Client: made number zero as valid server ID
  - Modbus Client: added broadcast support
  - Modbus Server: increased status report responsiveness
  - Modbus Server: added broadcast support
  - MQTT Modbus Gateway: added broadcast support
  - OpenVPN: removed disabled state from "logs" and "active clients" when user has no write permissions
  - OpenVPN: improved error messages
  - OpenVPN: added user and password options for export client configuration
  - SMS Utilities: added a warning about enabled SMS limit
- System
  - Access Control: added JSON-RPC enable toggle
  - JSON-RPC: moved to Package Manager
  - Update Firmware: added event log item about modem firmware update
  - WebUI: added indicators when a form input inside an inactive tab was changed or invalid
  - WebUI: added "Skip to main content" accessibility feature
  - WebUI: improved multi select design
  - WebUI: improved styles of drag hint on smaller screens
  - WebUI: improved consistent formatting across all hints
Fix
- Network
  - 802.1X Server: fixed redirect link to "Radius" page
  - 802.1X Server: fixed unsupported Guest VLAN option being displayed
  - Channel Analysis: fixed 20 and 160 MHz width parsing
  - Channel Analysis: fixed inconsistent figure widths between same width channels
  - Channel Analysis: centered figures using center channels instead of primary ones
  - Channel Analysis: fixed chart display when signal goes below -100 dBm
  - Mobile: fixed excessive SIM switching after changing configuration
  - Mobile: fixed segmentation fault during SIM switching
  - Mobile: fixed APN database backup and restore functionality
  - Multi WAN: fixed incorrect log trigger
- Services
  - Call Utilities: fixed answer action not triggering on second call
  - Data to Server: fixed Modbus input raw data sending when data type is Modbus PDU
  - Hotspot: fixed console errors that occurred in certain scenarios when enabling or disabling an instance
  - Hotspot 2.0: removed OSU provider
  - IPsec: fixed field validation to support % in custom options
  - Modbus Client: fixed PDU data type data collection
  - OpenVPN: fixed permissions for using IP Block
  - RMS: fixed RMS authentication under poor internet conditions
  - SMS Utilities: fixed mobile data usage display when mobile data is turned off
  - SMS Utilities: fixed incorrect 'Firmware on server' status message shown without internet connection
  - Stunnel: fixed disabled state of "enable" switch in overview page
  - Zerotier: fixed excessive ARP flooding on Zerotier interfaces
- System
  - Administration: fixed "User group" input validation
  - API Core: fixed double quoted boundary parsing
  - Kernel: fixed compilation of 'fs-cifs' kernel module package
  - Profiles: fixed endpoint response when calling from internal API
  - UI Core: fixed 'Save & Apply' button reachability on mobile devices
  - Update Firmware: fixed incorrect FOTA address in SDK
  - WebUI: fixed text-area width issues on small screen devices
CVE Patches
- CVE-2025-6021
- CVE-2025-32415
- CVE-2025-49794
- CVE-2025-49796

RUTE_R_00.07.17.5 | 2025.09.30

Improvements
- Network
  - Mobile: added ability to download eSIM profiles via Setup Wizard
Fix
- Network
  - Mobile: fixed possible hang when downloading eSIM profile
  - Network: fixed assigning interface to incorrect firewall zone when changing its settings

RUTE_R_00.07.17.4 | 2025.09.17

Initial firmware release