OTD500 Firmware Downloads

Main Page > OTD Outdoor routers > OTD500 > OTD500 Firmware Downloads

This page contains firmware files for OTD500 devices. Look to the table below or the changelog to find download links.

Stable firmware - this version has been tested through both internal QA processes and large-scale user deployments. All known issues have been resolved based on user reports and testing feedback. Stable firmware is currently used as the default for updates and is also deployed in mass production. To upgrade firmware using WebUI, follow the instructions in OTD500 Firmware.
Latest firmware - this is the most recent firmware release, featuring the latest updates, features, and fixes. While it has passed internal testing, it has not yet undergone widespread deployment or user validation. It may still contain undiscovered issues. We recommend testing on a small number of devices before considering broader updates.

Note: packages for Package Manager are independent from firmware and can be downloaded in the Package Downloads page.

OTD500

File	Type	Release date	Size	MD5	Links
OTD500_R_00.07.18.3_WEBUI.bin	Stable FW	2025.10.30	22 MB	58d2ea7b0adccaf993cbf62bde6045b3	Changelog API
OTD5_R_00.07.19.4_WEBUI.bin	Latest FW	2025.12.05	22 MB	71e0a16fe5ce88781795819e43a846af	Changelog API
OTD5_R_SDK_00.07.19.4.tar.gz	SDK	2025.12.05	43 MB	57cf672992480db67b6e33d20a535a10

FW checksums

Checksums for firmware files can be found here.

Changelog

OTD500_R_00.07.13 | 2025.03.03

Note: This firmware was removed due an issue with Auto Reboot functionality performing unnecessary device reboot.

New
- Network
  - BFD: added service
  - Mobile: added bandwidth rate limiting control when a specified data usage threshold is reached
  - Mobile: added "internet.telia.iot" APN for Telia carrier
  - Mobile: added "mobile.iot" APN for Elisa carrier
  - Mobile: added "dm.jplat.net" APN for HIS carrier
- Services
  - EoIP: added service
  - Events juggler: added service
- System
  - Update Firmware: added link to FW & SDK download page
Improvements
- Network
  - Dynamic routes: added validation for NHRP to prevent using same interface on multiple instances
  - Firewall: added possibility to manually specify conntrack helper for a port forward rule
  - Firewall: moved IPtables NAT extra to package manager
  - Mobile: improved data limit and SMS limit SIM switch rule behavior
  - Mobile: improved SIM switch service behavior when changing configuration
  - Mobile: updated 5G bands selection to display 5G mode
  - Mobile: improved eSIM profile delete functionality
  - Mobile: improved handling for the maximum number of active interfaces
  - Mobile: added inactive eSIM profile display
  - Mobile: improved operator name parsing from SPN file
  - Static Routes: improved descriptions for routing rules
  - Topology: moved to package manager
  - VRF: moved page from Network sub-menu to Network > Routing
  - iperf3: updated version to 3.17.1
- Services
  - Dynamic DNS: added support for using local openvpn interface ip address
  - Hotspot: added MAC address delimiter and case setting for Radius MAC authentication
  - Hotspot: improved API validations
  - IPsec: added ChaCha20-Poly1305 encryption algorithm
  - IPsec: improved performance when using GCM encryption
  - IPsec: added periodic connection check
  - Modbus Client: added store on data change mode
  - Modbus Client: added ability to choose where to save database
  - MQTT Modbus Gateway: improved constant $$NAME that can be defined in system configuration
  - OpenVPN: improved statuses for instances
  - OpenVPN: removed 'persist-tun' and 'persist-key' options from default configuration
  - OpenVPN: enabled DCO support for CHACHA20-POLY1305 cipher
  - OpenVPN: improved performance when using DCO-supported ciphers
  - SMS Gateway: moved Email to SMS service to Package manager
  - SMS Utilities: changed format of ADC and ACL status
  - SMS Utilities: added a new option "Send response SMS" which allows receiving action response message
  - Zerotier: added ability to upload a custom planet file
- System
  - Access Control: improved UX when disabling HTTP and HTTPS local access settings
  - Administration: added confirmation prompt when changing profiles
  - Administration: updated hostname validation to allow numeric-only hostname
  - Package Manager: added confirmation prompt when closing uploaded package modal
  - Security: changed password policy to require at least one special character
  - System Users: changed username validation to allow dots and underscores
  - Update Firmware: added link to changelog page
  - WebUI: removed basic/advanced mode
  - WebUI: updated Teltonika logo
  - Kernel: updated version to 5.10.233
Fix
- Network
  - 802.1X Server: fixed a segfault that sometimes occurs when port state changes to down
  - Devices: fixed error handling for deleting non-existent bridge sections
  - DHCP: fixed an issue where DHCP Relay mode did not work with an active IPv4 mobile connection
  - Firewall: fixed automatic conntrack helper not being assigned for port forward rules in some cases
  - Firewall: fixed traffic rules "start_date" and "stop_date" option validations failing due to incorrect format
  - Firewall: fixed incorrectly restricted AF23 value for traffic rule's DSCP option
  - Mobile: fixed parsing of large data from the module's serial port
  - Multi WAN: fixed pings being lost for backup wired wan interfaces
  - Network: fixed interfaces being displayed in the wrong page after updating with keep settings
  - Network: fixed a name duplication validation error that occurred between the network interface and the VRF instance
  - Network: fixed API failing to sort specific network interface configurations
  - Network: fixed interface remove button disable state being shown only after status is loaded
  - Network: fixed LAN interfaces sometimes not getting IPv6 prefix assigned on creation
  - Network: fixed DHCP lease sometimes not updating when changing mobile mode
  - Static Routes: fixed missing route type validation for API
  - VXLAN: made "Remote address" field required
- Services
  - Data to Server: fixed the OPC UA, DLMS, MBUS, and impulse counter inverted filtering logic
  - Data to Server: fixed "Invert filter" option to be hidden when using "DLMS" type and "Data filtering" option is selected to "All"
  - DLMS: fixed DLMS endpoint parameter validation
  - DLMS: fixed device option data type validation for connections endpoints
  - DLMS: fixed an issue where DLMS service could not read extended register type COSEM objects and display incorrect scaler value
  - DLMS: fixed an issue where non-persistent connections did not close properly
  - DMVPN: fixed NHRP multicast NFLOG group option not setting
  - Hotspot: fixed bandwidth limits setting with "chilli_query" command
  - Hotspot: fixed preserving Hotspot users between firmware upgrades
  - IPsec: fixed status display when compatibility mode is used
  - IPsec: fixed connections not terminating if instance is disabled
  - IPsec: fixed route based ipsec mode
  - L2TP: fixed occasional device hangs when routing L2TP traffic with "Software flow offload" enabled
  - Modbus Client: fixed API error when 'function' option is not present in alarms/requests configuration POST request
  - Modbus Client: fixed reusing connection in Modbus client Modbus request alarm action
  - Modbus Client: fixed email alarm action when TLS is enabled
  - Modbus Client: fixed alarm issues related to modem
  - MQTT Modbus Gateway: fixed client ID validation
  - NHRP: fixed missing dependencies
  - OpenVPN: fixed issues related to warnings when using external services
  - RMS: fixed the "Connection state" status displayed as JSON when device language was set to anything other than English
  - SMPP: fixed the "TLS/SSL" option to be visible even when the configuration is not enabled
  - SNMP: fixed validation to prevent creating or editing analog_type trap instances in devices that do not support this functionality
- System
  - Access Control: fixed "redirect_https" option reset after device reboot
  - Access Control: fixed default HTTPS CA certificate generation
  - Date & Time: fixed time synchronization with the browser when using Europe/Kyiv timezone
  - Package Manager: fixed spinner position in package table
  - Package Manager: fixed possible config migration issues for installed packages
  - Update Firmware: fixed unnecessary FOTA requests when FOTA is disabled
CVE Patches
- CVE-2022-49043
- CVE-2024-5290
- CVE-2024-9287
- CVE-2024-11053
- CVE-2024-34459
- CVE-2024-53580
- CVE-2024-56171
- CVE-2025-24928
- CVE-2025-27113

OTD500_R_00.07.12.3 | 2025.02.14

New
- Services
  - Modbus Client: added an endpoint that returns status for a single Modbus request
Fix
- Network
  - Mobile: fixed provider name parsing from SPN file
- Services
  - IPsec: fixed kernel warnings when custom NAT rules are used with "IPsec Software Flow Offload" enabled
  - OpenVPN: fixed an issue with config file parsing when carriage return characters were present
  - OpenVPN: fixed parsing of the 'Protocol','Port' and 'LZO' options from the config file

OTD500_R_00.07.12 | 2025.01.20

New
- Network
  - Mobile: added "global" APN for "Jersey Telecom" operator to APN database
  - Mobile: added "datasim.com" APN for "BT" operator to APN database
  - Mobile: added "datasim.com" APN for "Vodafone" operator to APN database
  - Mobile: added "datasim.com" APN for "Vodafone" operator to APN database
  - Mobile: added "datasim.global" APN for "Telefonica" operator to APN database
  - Mobile: added "soracom.io" APN for "Soracom" carrier to APN database
  - VXLAN: moved VXLAN package to PM
- Services
  - Dynamic DNS: added IPv6 support
Improvements
- Network
  - DHCP: added leased IP status in DHCP server page
  - DNS: added DNS strict order option
  - Firewall: moved target field to the bottom of NAT rule edit and renamed it to "Action" to match traffic rules
  - Firewall: moved all traffic rule fields related to action to be below action field
  - Firewall: removed ability for any firewall rules to have port selection if protocol is set to "all"
  - Firewall: separated zone and global firewall settings into different pages
  - Firewall: improved "Conntrack helpers" field in zone edit by making it disabled with explanation instead of hiding it
  - Mobile: improved deny data roaming to prevent connection issues after re-enabling roaming
  - Mobile: improved error messages for eSIM profile downloads
  - Mobile: improved active SIM display in tabs and status pages
  - Mobile: improved modem signal value filtering
  - Mobile: improved DNS checking across different interface PDP types
  - Network: fixed configuration viewing in the WAN page when user has only read permission
  - UDP Relay: moved service menu item from Network > Other > UDP Relay to Network > UDP Relay
  - VRF: added additional validations to address used device cases
  - VXLAN: separated edit form options into general and advanced tabs
  - Curl: updated version to 8.11.0
- Services
  - DLMS: added ability to view COSEM objects for each scanned physical device in overview page
  - IPsec: improved AES-CBC performance
  - NTP Client: updated 'Count of failed NTP requests' option to permanently synchronize with mobile operator when NTP servers fail
  - Overview: added IP type status to network interface cards
  - SMS Utilities: changed format of ADC and ACL status
  - azure-iot-sdk-c: updated version to LTS_08_2024
- System
  - API Core: added query parameter for configuration GET endpoints to receive all options, even if unset
  - Certificates: moved "Let's Encrypt" functionality to Package Manager
  - Package Manager: removed "Installed Version" and "Available Version" columns from the package table
  - Kernel: updated version to 5.10.229
Fix
- Network
  - 802.1X Server: updated radius secret back-end validation to match front-end validation
  - Dynamic routes: fixed dynamic routes not starting after installation on rare occasions
  - Firewall: deprecated invalid dest_local option in traffic rules API
  - Firewall: fixed zone placement in NAT rule description
  - Mobile: fixed eSIM profile configuration when multiple profiles are available
  - Mobile: fixed cell ID parsing on 2G networks
  - Mobile: fixed modem information collection after firmware installation
  - Mobile: fixed repetitive mobile band configuration on startup
  - Mobile: improved operator name parsing when information is unavailable on the SIM card
  - Mobile: fixed SMS limit displaying incorrect reset date
  - Mobile: fixed an issue where duplicate APN could be configured
  - Mobile: fixed eSIM plugin crash on modem info parsing
  - Mobile: fixed LAC/TAC display in mobile status page
  - Mobile: fixed an issue where incorrect SIM was selected
  - Mobile: fixed displaying 5G SA mobile signal properties in real-time data page
  - Mobile: fixed an issue where SIM card pin code would be stored as "N/A"
  - Network: fixed missing PPPoE username and password validations
  - Ports Settings: fixed incorrect warning message for identical port configurations
  - Ports Settings: fixed an occasional infinite spinner issue when changing port settings
  - QOS: fixed source and destination host field validation to allow subnet in CIDR notation
  - QOS: fixed starting SQM after reboot when QoS package is installed
  - Static Routes: fixed interface select not showing SSTP instances
  - VLAN: fixed wrong error message when deleting a VLAN that does not exist
  - VRF: fixed an issue that prevented saving the configuration when an inactive VLAN was selected
- Services
  - DLMS: fixed parameters table not always refreshing when selecting devices
  - DLMS: fixed mismatched name validations between API and WebUI
  - DLMS: fixed an issue where uptime becomes incorrect when system time changes
  - DNP3 Client: fixed API error when non existent parent id is provided in requests endpoint URL
  - DNP3 Client: fixed an issue where uptime becomes incorrect when system time changes
  - DNP3 Outstation: fixed an issue where uptime becomes incorrect when system time changes
  - IPsec: increased maximum length of local / remote identifiers and selector ID to 255 characters
  - IPsec: fixed deleting global secrets when more than one ipsec instances are configured
  - IPsec: fixed IPsec not reloading after DMVPN uninstall
  - IPsec: fixed showing empty error messages after instance deletion
  - IPsec: fixed excessive logging
  - IPsec: fixed firewall rules migration and identifier setting when certificate authentication is used
  - Modbus Client: fixed configuration files not being removed after package removal
  - Modbus Client: fixed an issue where uptime becomes incorrect when system time changes
  - Modbus Server: fixed configuration files not being removed after package removal
  - Modbus Server: fixed an issue where uptime becomes incorrect when system time changes
  - MQTT Modbus Gateway: fixed configuration files not being removed after package removal
  - MQTT Modbus Gateway: fixed an issue where uptime becomes incorrect when system time changes
  - NTP Client: fixed Count of time synchronizations that was not working properly
  - OPC UA Client: fixed URL validation
  - OPC UA Client: fixed configuration files not being removed after package removal
  - OPC UA Client: fixed API security mode option require validation
  - OPC UA Client: fixed an issue where uptime becomes incorrect when system time changes
  - OPC UA Client: fixed validation for prefix, midfix, postfix options
  - OPC UA Server: fixed configuration files not being removed after package removal
  - OPC UA Server: fixed API encryption option require validation
  - OPC UA Server: fixed an issue where uptime becomes incorrect when system time changes
  - OpenVPN: fixed the problem related to the 'netlink reports object not found' warning when using the DCO configuration
  - SNMP: fixed mwan3Ip to display 'N/A' if no IPs are present
  - TR-069: fixed ConnectionRequestURL node to return VPN IP address if VPN is used
  - Web Filter: fixed site blocking rules affecting router itself when selecting specific network interface
  - Web Filter: added exception to FOTA server blocking
  - Web Filter: fixed site blocking not working with Hotspot
  - Web Filter: fixed whitelist not working with domains that have forwards to other domains
- System
  - Certificates: fixed issue where the API allowed the deletion of root certificate
  - Certificates: fixed uploading of certificates that are 4096 bits or longer
  - Package Manager: added protection against zip bombs when uploading a package
  - PAM: fixed creating new instance
  - WebUI: fixed SDK example app validation mismatch between UI and API
  - WebUI: fixed default value display on instances for multiple services
CVE Patches
- CVE-2024-5594
- CVE-2024-9681
- CVE-2024-29195

OTD500_R_00.07.11.3 | 2024.12.17

Fix
- Services
  - Wireguard: fixed field validation after firmware upgrade
  - OpenVPN: fixed the certificate file selection issue in the server configuration

OTD500_R_00.07.11.2 | 2024.12.09

Fix
- Services
  - IPsec: fixed loading connections using AEAD algorithms
  - IPsec: fixed connection status display
  - IPsec: fixed Local source IP option
  - IPsec: fixed issue with multiple global secrets of same type

OTD500_R_00.07.11.1 | 2024.12.02

Initial firmware release