RUTM51 Firmware Downloads

Main Page > RUTM Routers > RUTM51 > RUTM51 Firmware Downloads

This page contains firmware files for RUTM51 devices. Look to the table below or the changelog to find download links.

Stable firmware - this version has been tested through both internal QA processes and large-scale user deployments. All known issues have been resolved based on user reports and testing feedback. Stable firmware is currently used as the default for updates and is also deployed in mass production. To upgrade firmware using WebUI, follow the instructions in RUTM51 Firmware.
Latest firmware - this is the most recent firmware release, featuring the latest updates, features, and fixes. While it has passed internal testing, it has not yet undergone widespread deployment or user validation. It may still contain undiscovered issues. We recommend testing on a small number of devices before considering broader updates.

Note: packages for Package Manager are independent from firmware and can be downloaded in the Package Downloads page.

RUTM51

File	Type	Release date	Size	MD5	Links
RUTM_R_00.07.18.3_WEBUI.bin	Stable FW	2025.10.30	27 MB	ba26b6110a119bddf16d89a4e21fb6ce	Changelog API
RUTM_R_00.07.19.4_WEBUI.bin	Latest FW	2025.12.05	27 MB	e329162d5187243dcbd21916fb249a27	Changelog API
RUTM_R_GPL_00.07.19.4.tar.gz	SDK	2025.12.05	44 MB	79c3a6a416f265e5e84004c6303cd061

FW checksums

Checksums for firmware files can be found here.

Changelog

RUTM_R_00.07.12.1 | 2025.01.27

Fix
- Network
  - Mobile: fixed provider name parsing from SPN file
- Services
  - IPsec: fixed kernel warnings when custom NAT rules are used with "IPsec Software Flow Offload" enabled
  - OpenVPN: fixed an issue with config file parsing when carriage return characters '

' were present

- - OpenVPN: fixed parsing of the 'Protocol','Port' and 'LZO' options from the config file

RUTM_R_00.07.12 | 2025.01.20

New
- Network
  - Mobile: added "global" APN for "Jersey Telecom" operator to APN database
  - Mobile: added "datasim.com" APN for "BT" operator to APN database
  - Mobile: added "datasim.com" APN for "Vodafone" operator to APN database
  - Mobile: added "datasim.com" APN for "Vodafone" operator to APN database
  - Mobile: added "datasim.global" APN for "Telefonica" operator to APN database
  - Mobile: added "soracom.io" APN for "Soracom" carrier to APN database
- Services
  - Dynamic DNS: added IPv6 support
  - Tailscale: added removal of firewall rules when the package is deleted
Improvements
- Network
  - DHCP: added leased IP status in DHCP server page
  - DNS: added DNS strict order option
  - Firewall: moved target field to the bottom of NAT rule edit and renamed it to "Action" to match traffic rules
  - Firewall: moved all traffic rule fields related to action to be below action field
  - Firewall: removed ability for any firewall rules to have port selection if protocol is set to "all"
  - Firewall: separated zone and global firewall settings into different pages
  - Firewall: improved "Conntrack helpers" field in zone edit by making it disabled with explanation instead of hiding it
  - Mobile: improved deny data roaming to prevent connection issues after re-enabling roaming
  - Mobile: improved error messages for eSIM profile downloads
  - Mobile: improved active SIM display in tabs and status pages
  - Mobile: improved modem signal value filtering
  - Mobile: improved DNS checking across different interface PDP types
  - Network: fixed configuration viewing in the WAN page when user has only read permission
  - UDP Relay: moved service menu item from Network > Other > UDP Relay to Network > UDP Relay
  - VRF: added additional validations to address used device cases
  - VXLAN: separated edit form options into general and advanced tabs
  - Wireless: sorted scan results by signal strength by default
  - Wireless: renamed password field in join modal to be called same as in edit modal
  - Wireless: improved wireless join action performance
  - Curl: updated version to 8.11.0
- Services
  - DLMS: added ability to view COSEM objects for each scanned physical device in overview page
  - IPsec: improved AES-CBC performance
  - Modbus TCP over Serial Gateway: added option for serial device reply timeout
  - Modbus TCP over Serial Gateway: improved performance
  - Modbus TCP over Serial Gateway: added multiple connections support for up to 10 clients
  - NTP Client: updated 'Count of failed NTP requests' option to permanently synchronize with mobile operator when NTP servers fail
  - Overview: added IP type status to network interface cards
  - SMS Utilities: changed format of ADC and ACL status
  - azure-iot-sdk-c: updated version to LTS_08_2024
- System
  - API Core: added query parameter for configuration GET endpoints to receive all options, even if unset
  - Package Manager: removed "Installed Version" and "Available Version" columns from the package table
  - Kernel: updated version to 5.10.229
Fix
- Network
  - 802.1X Server: updated radius secret back-end validation to match front-end validation
  - Dynamic routes: fixed dynamic routes not starting after installation on rare occasions
  - Firewall: deprecated invalid dest_local option in traffic rules API
  - Firewall: fixed zone placement in NAT rule description
  - Mobile: fixed cell ID parsing on 2G networks
  - Mobile: fixed modem information collection after firmware installation
  - Mobile: fixed repetitive mobile band configuration on startup
  - Mobile: improved operator name parsing when information is unavailable on the SIM card
  - Mobile: fixed SMS limit displaying incorrect reset date
  - Mobile: fixed an issue where duplicate APN could be configured
  - Mobile: fixed LAC/TAC display in mobile status page
  - Mobile: fixed an issue where incorrect SIM was selected
  - Mobile: fixed displaying 5G SA mobile signal properties in real-time data page
  - Mobile: fixed an issue where SIM card pin code would be stored as "N/A"
  - Network: fixed missing PPPoE username and password validations
  - QOS: fixed source and destination host field validation to allow subnet in CIDR notation
  - QOS: fixed starting SQM after reboot when QoS package is installed
  - Static Routes: fixed interface select not showing SSTP instances
  - VLAN: fixed wrong error message when deleting a VLAN that does not exist
  - VRF: fixed an issue that prevented saving the configuration when an inactive VLAN was selected
  - Wireless: fixed displayed client status when WPA supplicant does not have status
  - Wireless: fixed transmit power getting adjusted incorrectly when changing regulatory country
  - Wireless: fixed required password validation in join modal
  - Wireless: fixed API "htmode" option format validation
  - Wireless: fixed API allowing empty "country" value
- Services
  - DLMS: fixed parameters table not always refreshing when selecting devices
  - DLMS: fixed mismatched name validations between API and WebUI
  - DLMS: fixed an issue where uptime becomes incorrect when system time changes
  - DNP3 Client: fixed API error when non existent parent id is provided in requests endpoint URL
  - DNP3 Client: fixed an issue where uptime becomes incorrect when system time changes
  - DNP3 Outstation: fixed an issue where uptime becomes incorrect when system time changes
  - IPsec: increased maximum length of local / remote identifiers and selector ID to 255 characters
  - IPsec: fixed deleting global secrets when more than one ipsec instances are configured
  - IPsec: fixed IPsec not reloading after DMVPN uninstall
  - IPsec: fixed showing empty error messages after instance deletion
  - IPsec: fixed excessive logging
  - IPsec: fixed firewall rules migration and identifier setting when certificate authentication is used
  - Modbus Client: fixed configuration files not being removed after package removal
  - Modbus Client: fixed an issue where uptime becomes incorrect when system time changes
  - Modbus Server: fixed configuration files not being removed after package removal
  - Modbus Server: fixed an issue where uptime becomes incorrect when system time changes
  - Modbus TCP over Serial Gateway: fixed gateway forwarding unrequested data from serial device
  - Modem Control: fixed modem control duplicating configuration option
  - MQTT Modbus Gateway: fixed configuration files not being removed after package removal
  - MQTT Modbus Gateway: fixed an issue where uptime becomes incorrect when system time changes
  - NTP Client: fixed Count of time synchronizations that was not working properly
  - NTRIP: fixed an issue where uptime becomes incorrect when system time changes
  - OPC UA Client: fixed URL validation
  - OPC UA Client: fixed configuration files not being removed after package removal
  - OPC UA Client: fixed API security mode option require validation
  - OPC UA Client: fixed an issue where uptime becomes incorrect when system time changes
  - OPC UA Client: fixed validation for prefix, midfix, postfix options
  - OPC UA Server: fixed configuration files not being removed after package removal
  - OPC UA Server: fixed API encryption option require validation
  - OPC UA Server: fixed an issue where uptime becomes incorrect when system time changes
  - OpenVPN: fixed the problem related to the 'netlink reports object not found' warning when using the DCO configuration
  - Over IP: fixed an issue where uptime becomes incorrect when system time changes
  - Over IP: fixed API error when incorrect device option value was sent
  - Overview: fixed port display in LAN cards when there is configured port based VLAN or bridge via device page
  - SNMP: fixed mwan3Ip to display 'N/A' if no IPs are present
  - TR-069: fixed ConnectionRequestURL node to return VPN IP address if VPN is used
  - Web Filter: fixed site blocking rules affecting router itself when selecting specific network interface
  - Web Filter: added exception to FOTA server blocking
  - Web Filter: fixed site blocking not working with Hotspot
  - Web Filter: fixed whitelist not working with domains that have forwards to other domains
  - Wifi Scanner: fixed service not working when initially Wireless radio is disabled
- System
  - Certificates: fixed issue where the API allowed the deletion of root certificate
  - Certificates: fixed uploading of certificates that are 4096 bits or longer
  - Package Manager: added protection against zip bombs when uploading a package
  - PAM: fixed creating new instance
  - WebUI: fixed SDK example app validation mismatch between UI and API
  - WebUI: fixed default value display on instances for multiple services
CVE Patches
- CVE-2024-5594
- CVE-2024-9681
- CVE-2024-29195

RUTM_R_00.07.11.4 | 2024.12.19

Firmware includes no changes for this device

RUTM_R_00.07.11.3 | 2024.12.17

Fix
- Services
  - Input/Output: fixed issues causing fault messages on service close
  - Wireguard: fixed field validation after firmware upgrade
  - OpenVPN: fixed the certificate file selection issue in the server configuration

RUTM_R_00.07.11.2 | 2024.12.09

Fix
- Services
  - IPsec: fixed loading connections using AEAD algorithms
  - IPsec: fixed connection status display
  - IPsec: fixed Local source IP option
  - IPsec: fixed issue with multiple global secrets of same type

RUTM_R_00.07.11.1 | 2024.12.02

Fix
- Services
  - Hotspot: fixed limits not working for "MAC authentication", "Single sign-on" and "SMS OTP" modes
  - Ledman: fixed issue when network type LEDs are blinking when data connection is established
  - Tailscale: fixed the segmentation fault that occurred after installing the package

RUTM_R_00.07.11 | 2024.11.25

New
- Network
  - 802.1X: added initial server support
  - Devices: added network bridge status and configuration support
  - Firewall: added "IPsec software flow offload" feature
  - NAT64: added NAT64 WebUI configuration support
- Services
  - Data to Server: added LUA format support
  - DLMS: added option to configure which COSEM class attributes to read from the meter
  - Impulse Counter: added feature
  - Wireguard: added QR code configuration generator
- System
  - Administration: added capability of displaying a configurable banner before login
  - Password Policy: added ability to modify the password policy
  - System Users: added sensitive option toggle for user groups
Improvements
- Network
  - Firewall: added TCPMSS action to traffic rules
  - Mobile: improved mobile connection checking according to serving cell connection
  - Mobile: improved manual operator selection logic to prevent unintended operator changes
  - Mobile: added 'telenor.smart' APN for 'Telenor' operator to APN database
  - Mobile: added 'telenor.fwa' APN for 'Telenor' operator to APN database
  - Mobile: removed 'internet.ventelo.no' APN for 'Telenor' operator from APN database
  - Mobile: removed 'telenor' APN for 'Telenor' operator from APN database
  - Mobile: standardized operator names on the APN database
  - Multi AP: improved switching time between APs
  - RelayD: added ability to configure multiple Relayd configurations
  - Topology: added sorting functionality for "IP address" and "MAC address" table columns
  - Wireless: changed radio status to show channel frequency in MHz instead of GHz
- Services
  - Data to Server: added scheduler support
  - DLMS: added default values for table name columns
  - Hotspot: added MAC authentication option for SMS OTP authentication mode
  - Hotspot: added DOH and DOT addresses to default blocklist
  - IPsec: updated 'Custom option' field validation
  - IPsec: migrated to swanctl
  - Modbus Client: added phone group selection
  - Modbus Client: added email alarm action
  - OPC UA Client: changed validation, allowing to add certificates when channel encryption is not used
  - OpenVPN: improved WebUI page for creating and modifying instances
  - OpenVPN: added custom configuration file parsing
  - OpenVPN: added option to configure virtual addressing topology and support for TLS clients
  - OpenVPN: added 'adaptive' selection for the LZO parameter
  - OpenVPN: added support for multiple remote network values
  - OpenVPN: improved the selection of allowed data ciphers in the WebUI
  - OpenVPN: improved private key decryption
  - OpenVPN: removed dependency on the protocol value for configuring tunnel IPv6 addresses
  - OpenVPN: added the possibility to use multiple remote host/IP address values
  - OpenVPN: added support for exporting configuration
  - Mosquitto: updated version to 2.0.20
- System
  - Access Control: added ability to bind HTTP and HTTPS to specific IPs and ports
  - Events Log: improved event log messages format
  - Logging: added a log ID to each log entry for easier tracking and identification
  - Setup Wizard: added SIM card and modem statuses in Mobile page
  - WebUI: updated design of tables
  - Kernel: updated version to 5.10.226
  - libffi: updated version to 3.4.6
  - readline: updated version to 8.2
Fix
- Network
  - Mobile: fixed duplicate of "wap66" APN for "SFR" operator in APN database
  - Mobile: fixed duplicate of "wap68" APN for "SFR" operator in APN database
  - Mobile: fixed duplicate of "internet" APN for "TDC" operator in APN database
  - Mobile: fixed duplicate of "orangeweb" APN for "Orange" operator in APN database
  - Mobile: fixed duplicate of "wap.digicelbvi.com" APN for "Digicel" operator in APN database
  - Mobile: fixed duplicate of "wap.digicelha.com" APN for "Digicel" operator in APN database
  - Mobile: fixed duplicate of "indosatgprs" APN for "Indostat" operator in APN database
  - Mobile: fixed duplicate of "3gprs" APN for "3" operator in APN database
  - Mobile: fixed duplicate of "VZWINTERNET" APN for "Verizon" operator in APN database
  - Mobile: fixed duplicate of "soracom.io" APN for "FL1" operator in APN database
  - Mobile: fixed the USSD message when the network is not responding
  - Mobile: fixed serving cell band and bandwidth information
  - Mobile: removed voice features for EC25-AFFD module
  - Network: fixed duplicate of "pps" APN for "Zain KW" operator in APN database
  - Network: fixed MTU get from API
  - Static Routes: fixed IPv6 route target validation to accept IPv6 subnet
  - Wireless: fixed wireless not being reloaded after its interface's physical device was changed
- Services
  - Bluetooth: fixed service crash when trying to unpair devices
  - DLMS: fixed name validation when adding physical devices
  - Hotspot: fixed Hotspot themes installation without first installing Hotspot package
  - IPsec: fixed incorrect status display when multiple instances are configured
  - IPsec: fixed flushing of connection tracking table when compatibility mode is used
  - L2TP: fixed disappearing default route when using mobile interface as the default WAN
  - Ledman: fixed the LED animation during factory reset
  - Mobile Utilities: fixed password validation when enabling SMS rule
  - Modbus Client: fixed rpc crash when calling serial.test method
  - Modbus Server: fixed firewall rule creation
  - Python3: fixed out-of-tree package compilation issue with the SDK
  - SMS Gateway: fixed long HTTP URL formatting in SMS Forwarding to HTTP
  - SMS Utilities: fixed sending messages to short numbers
  - Zerotier: fixed saving configuration when LAN interface has no associated physical interface
- System
  - Access Control: fixed unauthorized errors on interface endpoints
  - Access Control: fixed IP Block configuration when upgrading from previous firmware versions
  - Package Manager: fixed VXLAN package not having link to configuration page
  - Package Manager: fixed restoring packages after firmware upgrade
  - Troubleshoot: fixed scenarios where TCPdump field was not displayed
  - WebUI: fixed issue when sometimes hidden sections with created instances were not displayed
CVE Patches
- CVE-2021-38291
- CVE-2024-6232
- CVE-2024-44070

RUTM_R_00.07.10.3 | 2024.11.08

Fix
- Network
  - Kernel: fixed an issue with wi-fi not starting properly

RUTM_R_00.07.10.2 | 2024.11.04

New
- Network
  - Mobile: added "kajeet.gw12.vzwentp" APN for "Verizon" operator to APN database
  - Mobile: added "V5GA01INTERNET" APN for "Verizon" operator to APN database
  - Mobile: added "kajeet.fw5g.vzwentp" APN for "Verizon" operator to APN database
  - Mobile: added "iot.kajeet" APN for "T-Mobile" operator to APN database
  - Mobile: added "iot.tmowholesale.static" APN for "T-Mobile" operator to APN database
  - Mobile: added "iot.tmowholesale" APN for "T-Mobile" operator to APN database
  - Mobile: added "sentinel01.com.attz" APN for "AT&T" operator to APN database
  - Mobile: added "sentinelent01.com.attz" APN for "AT&T" operator to APN database
  - Mobile: added "sentinelnb01.com.attz" APN for "AT&T" operator to APN database
  - Mobile: added "213x.sentinel01.com.attz" APN for "AT&T" operator to APN database
  - Mobile: added "213x.sentinelent01.com.attz" APN for "AT&T" operator to APN database
  - Mobile: added "sentinel-static.mcs" APN for "AT&T" operator to APN database
  - Mobile: added "uscc05016.enterprise3.usc-cdp" APN for "US Cellular" operator to APN database
  - Mobile: added "uscc07009.enterprise3.usc-cdp" APN for "US Cellular" operator to APN database
  - Mobile: added "sentinel.crs.bell.ca.ioe" APN for "Bell Mobility" operator to APN database
  - Mobile: added "kajeet.crs.bell.ca.ioe" APN for "Bell Mobility" operator to APN database
  - Mobile: added "sentinel.apn" APN for "Rogers" operator to APN database
  - Mobile: added "sentinel.vf" APN for "Vodafone" operator to APN database
  - Mobile: added "sentinel.lpwa.vf" APN for "LPWA" operator to APN database
Improvements
- Network
  - Mobile: improved carrier aggregation signal value parsing
Fix
- Network
  - Firewall: fixed bug in NAT rule migration script that would overwrite Port Forwarding rule options
  - Mobile: fixed eSIM profile loading from servers with unusual response

RUTM_R_00.07.10 | 2024.10.10

New
- System
  - Initial firmware release