OTD500 Firmware Downloads

Main Page > OTD Outdoor routers > OTD500 > OTD500 Firmware Downloads

This page contains firmware files for OTD500 devices. Look to the table below or the changelog to find download links.

Stable firmware - this version has been tested through both internal QA processes and large-scale user deployments. All known issues have been resolved based on user reports and testing feedback. Stable firmware is currently used as the default for updates and is also deployed in mass production. To upgrade firmware using WebUI, follow the instructions in OTD500 Firmware.
Latest firmware - this is the most recent firmware release, featuring the latest updates, features, and fixes. While it has passed internal testing, it has not yet undergone widespread deployment or user validation. It may still contain undiscovered issues. We recommend testing on a small number of devices before considering broader updates.

Note: packages for Package Manager are independent from firmware and can be downloaded in the Package Downloads page.

OTD500

File	Type	Release date	Size	MD5	Links
OTD5_R_00.07.18.3_WEBUI.bin	Stable FW	2025.10.30	22 MB	58d2ea7b0adccaf993cbf62bde6045b3	Changelog API
OTD5_R_00.07.19.2_WEBUI.bin	Latest FW	2025.11.26	22 MB	2b2f55b85c5c70eaa037b9db03174e8b	Changelog API
OTD5_R_SDK_00.07.19.2.tar.gz	SDK	2025.11.26	43 MB	74d97bef5f458a89e878e29076569843

FW checksums

Checksums for firmware files can be found here.

Changelog

OTD5_R_00.07.19.2 | 2025.11.26

Fix
- System
  - Update Firmware: fixed firmware download cancellation

OTD5_R_00.07.19.1 | 2025.11.12

Improvements
- Services
  - RMS: added TPM support
Fix
- System
  - WebUI: fixed unresponsive navigation after password change

OTD5_R_00.07.19 | 2025.11.06

New
- Network
  - Mobile: added "web.unomobile.it" APN for "1Mobile" operator to APN database
Improvements
- Network
  - DHCP server: added message to Events Log when there are no available DHCP addresses
  - Firewall: added status to Traffic Rule page
  - Firewall: added status to Port Forwards page
  - Firewall: added status to NAT page
  - Firewall: added status to DMZ page
  - Firewall: updated status page to have chain and rule tables for better searchability
  - Firewall: added shortcuts from firewall rules in status page to firewall configurations that created them
  - HTTPS DNS Proxy: disabled field requirements when service is disabled
  - Mobile: improved mobile operator parsing for connection establishment
  - Mobile: added support for eSIM to Mobile Usage page
  - Mobile: updated default SIM selection in Mobile General page
  - Mobile: added switch to disable local DHCPv4 leases when operating in bridge mode
  - Mobile: added more information about SIM state changes in logs
  - Mobile: improved error handling during mobile data connection bringup
  - Network: improved DHCP client and server related fields
- Services
  - Cloud of Things: changed communication from HTTP to MQTT
  - Cumulocity: changed communication from HTTP to MQTT
  - EoIP: added IPv6 support
  - Event juggler: added `io_reset` option
  - Events reporting: moved Events reporting service to Package manager
  - GRE: added IPv6 support
  - MQTT Modbus Gateway: added validation to discard responses with invalid ID or function code
  - OpenVPN: improved page load speed by removing duplicate data request
  - OpenVPN: moved OpenVPN DCO kernel module to package manager
  - SNMP: added SET support for universal gateway tag value table
  - Stunnel: added support for using IPv6 addresses in the connect IPs field
  - Wireguard: added wireguard watchdog support
  - cURL: updated version to 8.16.0
  - OpenVPN: updated version to 2.6.14
- System
  - Custom Scripts: added page loading spinner
  - Speed Test: added support for custom server url
  - Update Firmware: improved FOTA communication and caching logic
  - WebUI: improved usability on small screens
  - Kernel: updated version to 6.6.108
  - PAM: updated version to 1.7.1
Fix
- Network
  - DHCP server: fixed DHCPv6 server reload when changing VLAN
  - DNS: fixed "Static addresses" and "Custom redirect" field required validation
  - Dynamic routes: fixed services other than EIGRP restarting on network change
  - Firewall: added IPsec and OpenConnect configurations as possible networks
  - Firewall: fixed NAT extra custom rules not applying after FW upgrade
  - HTTPS DNS Proxy: fixed DNS requests failing after obtaining new IP
  - Mobile: fixed informational messages when SIM configuration is not found
  - Mobile: fixed configuration files after ESIM deletion
  - Mobile: fixed IPv4/IPv6 type mobile reconnection loop if one type has unsuccessful connection
  - Mobile: fixed updating modem firmware when custom root CA is configured
  - Mobile: fixed eSIM profile display for profiles without provider value
  - Mobile: fixed missing modem firmware version after modem firmware update
  - Multi WAN: fixed Multi WAN interface creation
  - Ports Settings: fixed ports re-enabling themselves after changing certain settings
- Services
  - DLMS: fixed access error when reading an empty sort object attribute on a generic profile object
  - DLMS: fixed "Entries" not being clamped for "Profile generic" COSEM type
  - DMVPN: fixed custom changes in IPsec, GRE and NHRP pages being reverted when saving DMVPN instance
  - DNP3 Client: fixed dnp3 test function printing analog values in wrong format
  - DNP3 Client: fixed always shown warning notification by displaying status hints for affected requests
  - Dynamic DNS: fixed "Check interval" and "Force interval" validation issues
  - Email to SMS: fixed process hang during email handling
  - IPsec: fixed an issue where connections could be re-initiated even while being active
  - IPsec: fixed authentication issue when using multiple instances with the PSK authentication method
  - IPsec: fixed Xauth connections not establishing when identifiers are set
  - IPsec: fixed wrong active client information when using certificates
  - IPsec: fixed incorrect uptime display when using multiple responder instances
  - L2TP: fixed L2TP over IPsec connection issue
  - L2TPv3: fixed parameter validation for IPv6 addresses in configuration
  - Modbus Client: fixed email and MQTT alarm actions running longer than intended
  - Modbus Client: fixed always shown warning notification by displaying status hints for affected requests
  - Modbus Client: fixed test request endpoints failing if 'broadcast' option is not provided
  - MQTT Broker: fixed TLSv1.1 configuration
  - OpenVPN: fixed parsing uploaded custom OpenVPN configuration
  - OpenVPN: fixed issues with parsed fields being displayed after config deletion
  - OpenVPN: fixed configuration parsing issues related to security options
  - SMS Forwarding: fixed certificate verification disabling
  - Wireguard: fixed creation of routes to endpoint host when default route is not set
- System
  - Access Control: fixed displaying certificates in "HTTPS" edit modal after page refresh
  - Administration: fixed incorrect creation date of user's default configuration
  - API Core: fixed API error on 'DELETE' request with bad payload structure
  - Events Log: fixed sorting reset functionality of table columns and "Event group" column issues
  - RutOS: fixed firmware upgrade bug
  - Setup Wizard: fixed redirect of "RMS" step
  - System Users: fixed multiple network pages working improperly with non-root users
  - WebUI: fixed "visible columns" button to be clickable for users without "write" permissions
  - WebUI: removed bell notifications from modals
  - WebUI: fixed length validation for custom input values in select lists
  - WebUI: fixed active state of filters on tables
CVE Patches
- CVE-2025-4373 - 4.8 (MEDIUM)
- CVE-2025-6020 - 7.8 (HIGH)
- CVE-2025-6052 - 7.5 (HIGH)

OTD5_R_00.07.18.3 | 2025.10.30

Improvements
- System
  - ubus: updated version to 2025-10-19
Fix
- System
  - Backup: fixed issues uploading older backup files

OTD5_R_00.07.18.2 | 2025.10.22

Fix
- Services
  - IPsec: fixed issue where IPsec connections failed during WAN failover
  - OpenVPN: fixed status issue after firmware upgrade

OTD5_R_00.07.18.1 | 2025.10.13

Fix
- Network
  - Mobile: fixed operator selection under specific conditions

OTD5_R_00.07.18 | 2025.10.01

Note: This firmware version has been withdrawn due to an issue with incorrect mobile operator selection under specific conditions.

New
- Network
  - Mobile: added historical signal information display
  - Mobile: added "internet" APN for "Telenor" operator to APN database
Improvements
- Network
  - DHCP server: added option 82 support to DHCP relay
  - Mobile: added SIM switch historical data
  - Mobile: improved SIM switch status information
  - SSHFS: updated mount point location
  - Dnsmasq: updated version to 2.90
  - Iperf3: updated version to 3.19.1
- Services
  - DLMS: improved COSEM value reading speed
  - DNP3 Client: added DNP3 client support for universal gateway
  - DNP3 Outstation: increased status report responsiveness
  - IPsec: added requirement for local certificate and key fields when X.509 authentication method is selected
  - IPsec: added improvements for IPv6 support
  - Modbus Client: increased test button and status report responsiveness
  - Modbus Client: made number zero as valid server ID
  - Modbus Client: added broadcast support
  - Modbus Server: increased status report responsiveness
  - Modbus Server: added broadcast support
  - MQTT Modbus Gateway: added broadcast support
  - OpenVPN: removed disabled state from "logs" and "active clients" when user has no write permissions
  - OpenVPN: improved error messages
  - OpenVPN: added user and password options for export client configuration
  - SMS Utilities: added a warning about enabled SMS limit
- System
  - Access Control: added JSON-RPC enable toggle
  - JSON-RPC: moved to Package Manager
  - Update Firmware: added event log item about modem firmware update
  - WebUI: added indicators when a form input inside an inactive tab was changed or invalid
  - WebUI: added "Skip to main content" accessibility feature
  - WebUI: improved multi select design
  - WebUI: improved styles of drag hint on smaller screens
  - WebUI: improved consistent formatting across all hints
Fix
- Network
  - 802.1X Server: fixed redirect link to "Radius" page
  - 802.1X Server: fixed unsupported Guest VLAN option being displayed
  - Mobile: fixed excessive SIM switching after changing configuration
  - Mobile: fixed segmentation fault during SIM switching
  - Mobile: fixed APN database backup and restore functionality
  - Multi WAN: fixed incorrect log trigger
- Services
  - Call Utilities: fixed answer action not triggering on second call
  - Data to Server: fixed Modbus input raw data sending when data type is Modbus PDU
  - Hotspot: fixed console errors that occurred in certain scenarios when enabling or disabling an instance
  - IPsec: fixed field validation to support % in custom options
  - Modbus Client: fixed PDU data type data collection
  - OpenVPN: fixed permissions for using IP Block
  - RMS: fixed RMS authentication under poor internet conditions
  - SMS Utilities: fixed mobile data usage display when mobile data is turned off
  - SMS Utilities: fixed incorrect 'Firmware on server' status message shown without internet connection
  - Stunnel: fixed disabled state of "enable" switch in overview page
  - Zerotier: fixed excessive ARP flooding on Zerotier interfaces
- System
  - Administration: fixed "User group" input validation
  - API Core: fixed double quoted boundary parsing
  - Kernel: fixed compilation of 'fs-cifs' kernel module package
  - Profiles: fixed endpoint response when calling from internal API
  - UI Core: fixed 'Save & Apply' button reachability on mobile devices
  - Update Firmware: fixed incorrect FOTA address in SDK
  - WebUI: fixed text-area width issues on small screen devices
CVE Patches
- CVE-2025-6021
- CVE-2025-32415
- CVE-2025-49794
- CVE-2025-49796

OTD5_R_00.07.17.5 | 2025.09.30

Improvements
- Network
  - Mobile: added ability to download eSIM profiles via Setup Wizard
Fix
- Network
  - Mobile: fixed possible hang when downloading eSIM profile
  - Network: fixed assigning interface to incorrect firewall zone when changing its settings

OTD5_R_00.07.17.4 | 2025.09.17

Fix
- System
  - Profiles: fixed keep-settings execution for older profiles

OTD5_R_00.07.17.3 | 2025.09.05

Fix
- Services
  - Web Filter: fixed host blocking with hotspot interfaces

OTD5_R_00.07.17.2 | 2025.09.02

Fix
- Network
  - DNS: fixed saving of DNS server IPs
  - Mobile: fixed SIM switch rule triggering unexpectedly due to NTP time adjustments
- System
  - Backup: fixed keep-settings execution for older backups

OTD5_R_00.07.17.1 | 2025.08.19

Fix
- Network
  - Multi WAN: fixed failover startup after reboot

OTD5_R_00.07.17 | 2025.08.12

Note: This firmware was removed due an issue with Failover functionality.

New
- Network
  - Mobile: added "du.soracom.io" APN for "Soracom" carrier to APN database
  - Mobile: added "m2m" APN for "Cellhire IoT" operator to APN database
  - Mobile: added "internet" APN for "Cellhire" operator to APN database
  - Mobile: added "tis.com" APN for "Sparkle" operator to APN database
- System
  - RutOS: added instructions for creating a simple package using the SDK
Improvements
- Network
  - 802.1X Server: simplified new instance creation
  - 802.1X Server: added alert to notify when the 802.1X server no longer manages VLANs
  - Mobile: added IPv4 or IPv6 data connection information in event log
  - Mobile: added signal data collection
  - Multi WAN: added drag & drop operation for the "Failover" mode
  - Realtime Traffic: added ability to see up to 1 hour of live data
  - VRF: added VPN selection support in the WebUI
  - Iperf3: updated version to 3.19
- Services
  - Auto Reply: increased SMS text length from 3 to 8 messages
  - Call Utilities: increased SMS text length from 3 to 8 messages
  - Email Relay: simplified new instance creation
  - Event juggler: added call action functionality to hang up the call after a specified time
  - Event juggler: increased SMS text length from 3 to 8 messages
  - Event juggler: added live character counter for SMS messages
  - Mobile Utilities: added WebUI notifications for received messages and triggered SMS rules
  - Mobile Utilities: added UCI ACL rules
  - Package Manager: added confirmation modal when removing multiple packages
  - SMS Utilities: increased SMS text length from 3 to 8 messages
  - Traffic Logging: improved Hotspot data stream retrieval
- System
  - Administration: added notifications and alerts display toggles
  - Administration: updated certificates page
  - Package Manager: added WebUI notifications for successful and failed package installations
  - UI Core: changed all chart styles
  - WebUI: updated brand color palette
  - WebUI: added sensitive information hiding feature for 'IMSI', 'ICCID' and 'IP address' fields for lower privilege users
  - WebUI: added truncation and hover tooltips for long side widget card titles
  - WebUI: unified the "Change Password" page title
  - Kernel: updated version to 6.6.96
Fix
- Network
  - 802.1X Server: fixed EAP "SUCCESS" response when authentication fails due to not being able to find the RADIUS requested VLAN
  - Data limit: fixed interface data limit not being reset when interface is down
  - DHCP server: fixed DHCPv6 server reload when changing VLAN
  - DHCP server: fixed wrong DHCPv4 server conflict message being displayed when both interfaces have no device assigned
  - HTTPS DNS Proxy: fixed typo in the configuration page
  - Mobile: fixed issue where auto subnet selection used incorrect subnet mask in Bridge or Passthrough modes
  - Mobile: fixed modem driver network stats cleanup on modem restart
  - Mobile: fixed mobile connection loop on unsuccessful ping
  - VLAN: fixed a missing validation message in the WebUI when VLAN migration is restricted
- Services
  - Data to Server: fixed configuration clearing when plugin packages are deleted
  - DLMS: fixed missing API validation message for 'server_addr' option
  - DLMS: fixed service crashing when using "Register activation", "Activity calendar" and "Profile generic" COSEM types
  - DNP3 Client: fixed 'index' option API error in the 'requests' endpoints
  - Hotspot: fixed redirect to custom success url with the same domain as landing page
  - Hotspot: fixed 'reset' button functionality and template input styles in 'Landing pages' page
  - IPsec: fixed intermittent errors when checking IPsec status
  - Modbus Client: fixed timeout behavior to not include serial device acquisition time
  - Modbus Server: fixed custom register block not working if count is more than 128 registers
  - SMS Utilities: fixed incorrect status in 5G operation mode
  - Wireguard: fixed incorrect route towards other peer being added
  - Wireguard: fixed Wireguard not re-adding default routes after deleting instance
- System
  - Access Control: fixed duplicate query parameter validation
  - Access Control: fixed HTTP WAN remote switch is shown as disabled after the "WAN to LAN" action
  - Administration: fixed device usage duplicate query parameter validation
  - Administration: fixed issue of "delete" button not being disabled on "System users" page when user has no write permissions
  - Events Log: fixed duplicate query parameter validation
  - IP Block: fixed MAC blocking interface validation
  - NTP Client: fixed fail count when operator synchronization is enabled
  - Package Manager: updated "View packages repository" link
  - Profiles: fixed issue that allowed deletion of profiles in use by the scheduler
  - Setup Wizard: fixed "Setup Wizard" access issues with lower privilege users
  - WebUI: fixed notifications disappearing on page navigation
  - WebUI: fixed validation for fields using "url" rule
CVE Patches
- CVE-2023-53154
- CVE-2024-31578
- CVE-2024-52533

OTD5_R_00.07.16.6 | 2025.09.17

Fix
- System
  - Profiles: fixed keep-settings execution for older profiles

OTD5_R_00.07.16.3 | 2025.07.28

Firmware includes no changes for this device

OTD5_R_00.07.16.2 | 2025.07.24

New
- Services
  - SNMP: added LAN clients' table OID
Fix
- Services
  - OpenVPN: fixed connectivity issues when using WAN failover

OTD5_R_00.07.16.1 | 2025.07.17

New
- Services
  - DNP3 Outstation: added support for data conversion from other industrial protocols
  - SNMP: added Universal Gateway support for Modbus and M-Bus protocols
Improvements
- Network
  - DHCP server: added excluded address count to Leased IPs status
  - Firewall: added attack prevention option to log detected flood events
  - Mobile: improved provider name parsing when it is not returned by the module
  - Mobile: changed "telstra.wap" APN for "Telstra" operator to "telstra.internet" in APN database
  - Mobile: improved validation to prevent SMS sending when SIM is removed
  - libpcap: updated version to 1.10.5
  - tcpdump: updated version to 4.99.5
- Services
  - Data to Server: updated collection and input card design
  - Data to Server: added support for specifying multiple minute values in one row for the "Scheduler"
  - Data to Server: added support for Base64 data encoding
  - Data to Server: added warning message for Lua format example script
  - Data to Server: improved example format Lua script
  - DLMS: added filtering query parameters to database API endpoint
  - DNP3 Client: added filtering query parameters to database API endpoint
  - Event juggler: updated event and action card design
  - Event juggler: updated modem selection to include external modems
  - Event juggler: updated "Key-value arguments" to allow duplicates in "Script" and "HTTP" actions
  - Event juggler: increased maximum "Key-value arguments" count in "Script" and "HTTP" actions
  - Event juggler: improved configuration creation in WebUI
  - L2TP: added support for custom ports
  - L2TPv3: improved validation for multiple fields
  - Messages: increased allowed SMS length from 3 to 8 messages
  - Mobile Utilities: added explanatory message to disabled "Storage" options
  - Modbus Client: added filtering query parameters to database API endpoint
  - Modbus Server: added multi value support in data source selection
  - OPC UA Client: added filtering query parameters to database API endpoint
  - OpenVPN: added TPM key support
  - Stunnel: added TPM2.0 key support
- System
  - Troubleshoot: added support for capturing packets via the NFLOG interface
  - WebUI: updated icon sizes
  - WebUI: added long hold to drag on mobile for draggable cards
  - WebUI: improved layout and functionality of log modals
  - WebUI: added indication to 'System' status page if modem is unreachable
  - WebUI: added information about 'Branch' to 'System' page
  - dropbear: updated version to 2025.88
  - Kernel: updated version to 6.6.92
  - tpm2-openssl: updated version to 1.3.0
Fix
- Network
  - DHCP server: fixed calculating DHCP address range when changing subnet mask
  - DHCP server: fixed the incorrectly displayed error for server status
  - Mobile: fixed IPv6 prefix delegation option to stop delegating prefix when option is disabled
  - Network: fixed incorrect IP address netmask validation
  - Ports Settings: fixed page refresh button
  - Ports Settings: fixed advertisement not required when auto-negotiation is enabled in API
  - Realtime Traffic: fixed data usage show for interfaces with PPPoE protocol
  - Topology: fixed issue where scan buttons were not clickable on mobile devices
- Services
  - Data to Server: fixed dnp3 package offline installation bug
  - Data to Server: fixed GPS data formatting
  - Data to Server: fixed SIM card support count in Mobile Usage
  - DLMS: fixed COSEM attribute filtering
  - DMVPN: fixed DMVPN routes not showing up in Static Routes
  - DNP3 Client: fixed requests API error when incorrect 'index' option value was provided
  - Dynamic DNS: fixed Cloudflare authentication type, username saving errors
  - Event juggler: added missing I/O pins for "Copy pin state" option
  - Event juggler: fixed minor I/O validation bugs
  - Hotspot: added SNMP Hotspot trap removal when Hotspot package is removed
  - Hotspot: fixed some LAN traffic being forwarded to Hotspot interface when using VLANs
  - Hotspot: fixed purple.ai configuration profile
  - IPsec: fixed incorrect IPsec restarts when used with Multi WAN
  - Modbus Server: fixed issue where data sources with write permission would not work
  - Modbus Server: fixed regfile uniqueness validation between instances
  - Modbus Server: fixed regression of writing single coil/register always failing
  - OpenVPN: fixed connection checking when using IPv6
  - POE: fixed high CPU usage for devices with IP802 chips
  - TR-069: fixed device name generation
- System
  - NTP: adjusted modem time synchronization to handle daylight saving time correctly

OTD5_R_00.07.15.4 | 2025.07.11

Improvements
- Network
  - Mobile: improved handling of ESM reject causes #33, #50, #51, and #52
Fix
- System
  - Backup: fixed internal firmware metadata not updating after applying backup

OTD5_R_00.07.15.2 | 2025.06.27

Improvements
- Network
  - Network: swapped MAC addresses for lan1 and lan2
- System
  - Update Firmware: optimized firmware validation through caching
Fix
- Services
  - Data to Server: fixed MBus database path bug
  - Hotspot: fixed segmentation fault
  - L2TP: fixed memory leak issue with invalid packets
- System
  - Package Manager: fixed possible config migration issues on the PM installed packages
  - System Status: fixed display of MAC address
  - WebUI: fixed subscribe processes not exiting when UHTTPD is killed

OTD5_R_00.07.15.1 | 2025.06.17

Fix
- Network
  - Realtime Traffic: fixed data collection in rare cases
- Services
  - Event juggler: fixed the execution of user scripts
  - Hotspot: fixed users scripts execution
  - Hotspot: fixed user scripts migration after upgrade with keep settings
  - SMS Utilities: fixed the execution of user scripts
- System
  - Backup: fixed missing root and admin user restoration during backup apply

OTD5_R_00.07.15 | 2025.06.06

New
- Network
  - Mobile: added "iot.t-mobile.com" APN for "T-Mobile" operator to APN database
- Services
  - Java VM: added package to Package Manager
  - Mobile Utilities: added support for eSIM confirmation code in the esim_install rule
- System
  - WebUI: added default HTTP redirect to HTTPS
Improvements
- Network
  - DHCP server: included static leases to "Leased IPs" status that are outside of DHCP pool range but are inside interface subnet range
  - Dynamic routes: improved mobile interface handling
  - Dynamic routes: added support for selecting VPN interfaces
  - Firewall: disabled Allow-ICMPv6-Forward rule
  - IGMP Proxy: added VPN interface support
  - Mobile: improved SIM switch behavior when its configuration is changed
  - Mobile: added ability to change measurement units in "Mobile Usage" page
  - Mobile: added ability to export mobile usage data to CSV file
  - Mobile: added more statistical parameters to "Mobile Usage" page
  - Mobile: changed "fast.t-mobile.com" APN PDP type from IPv6 to IPv4v6
  - Mobile: updated LAN port reset behavior during bridge/passthrough setup
  - Multi WAN: updated configuration interface
  - Multi WAN: added manual member configuration
  - Multi WAN: added expanded Multi WAN interface statuses
  - Network: updated network interface statuses to be more detailed and easier to understand
  - Network: improved 802.1p priority configuration fields
  - iw: updated version to 6.9
  - mac80211: updated version to 6.12.6
  - mt76: updated version to 2025-01-22
- Services
  - AWS IoT Core: updated "AWS provisioning" configuration parameter list
  - BACnet: added support for devices with USB adapters and devices with no rs485 interface
  - Call Utilities: updated "Get status" action "Text message" parameter list
  - Data to Server: added support for receiving and sending data via SMS
  - Data to Server: added FTP, SMTP, Socket, and Lua script support for data transmission
  - Data to Server: updated "Collection configuration" edit, "Input configuration" edit, "Format string" and "Tag expansion" parameter lists
  - Data to Server: added support for ISO 8601 date format
  - DLMS: added API endpoints to get the current value of a configured group or group value
  - DNP3 Client: added API endpoints to get the current value of a configured request
  - Dynamic DNS: added DNS server field
  - Dynamic DNS: reduced service restarts when mobile is used
  - Email to SMS: improved email handling by deleting emails over 61440 bytes
  - Event juggler: added call action support
  - Event juggler: implemented a retry mechanism for actions in case of failure
  - Event juggler: updated "Send email", "Send SMS", "MQTT", "Script" and "HTTP" action "Text message" parameter list
  - Event juggler: added delete icon on "Remove action" button
  - Event juggler: removed "Startup" event type from event configuration due to duplication
  - Events Reporting: updated "Message text on event" parameter list
  - Modbus Client: updated "Modbus TCP Client" and "Modbus Serial Client" configuration "MQTT message" and "Email" action "JSON format" parameter list
  - OPC UA Client: added API endpoints to get the current value of a configured group, group value or server node
  - SMS Forwarding: updated enable option help messages
  - SMS Gateway: updated "Auto reply" "Message text" parameter list
  - SMS Utilities: updated "Reboot", "Send status" action, "Text message" parameter and "SMS rule description" lists
  - Mosquitto: updated version to 2.0.21
  - ovpn-dco: updated version to 0.2.20241216
- System
  - Access Control: added ability to specify WAN port
  - Access Control: improved HTTPS certificate validation
  - API Core: added preflight OPTIONS method support
  - Certificates: changed certificate signing to use RSA-PSS padding scheme
  - Speed Test: added functionality to find any country servers by using search
  - TCP dump: added suggestions for host and port filters
  - Troubleshoot: separated troubleshooting into individual configuration tabs
  - Troubleshoot: improved logging size configuration and log size limits
  - WebUI: reduced size of the navigation menu and some form elements
  - WebUI: updated table selected rows actions design
  - WebUI: added HTTPS certificate expiration warning and renew functionality
  - WebUI: unified styles of first login and renew expired password modals
  - WebUI: updated Japanese translations
  - Linux: updated version to 6.6.87
Fix
- Network
  - 802.1X Server: fixed 802.1X (server) page access not being controlled by the "Network > Ports" entry
  - DHCP server: fixed DHCPv4 server shutdown when multiple LANs use the same interface and one of them disables DHCPv4
  - Firewall: fixed duplicate VPN zone creation
  - Firewall: fixed HTTP and HTTPS ports migration for DMZ port forwards rules
  - Firewall: removed redundant "Internal zone" field from port forward configuration
  - Mobile: fixed issue where neighbor IP address was not reachable in Bridge/Passthrough modes
  - Mobile: fixed SMS grouping error when old SMS are never deleted
  - Network: fixed incorrect network type shown for LAN with only WiFi interface
  - Network: fixed system crash when using modem data under low memory conditions
  - Static Routes: fixed GRE tunnel name display when its name has special symbols
  - Topology: fixed issue of duplicated WAN interface being displayed under certain configurations
  - VLAN: fixed new port based VLAN creation when untagged ports are provided
- Services
  - Data to Server: fixed "SIM Card" option select list in "Mobile usage" data input
  - DLMS: fixed COSEM attribute filtering
  - DLNA: fixed option list of "Interfaces"
  - DMVPN: fixed displaying NAT rules
  - Dynamic DNS: fixed IPv6 support in bind-nsupdate
  - Dynamic DNS: fixed logs showing IPv6 expansion errors when no IP is found
  - Event juggler: fixed "SIM Card" option select list in "SIM switch" and "Connection" actions
  - Event juggler: fixed Reboot via SMS Log event
  - Event juggler: fixed duplicated names validation
  - Event juggler: fixed an issue affecting GSM event stability
  - Event juggler: fixed HTTP action when secure connection is chosen
  - Event juggler: fixed condition deletion not working in some edge cases
  - Hotspot: fixed SSL certificates permissions
  - IPsec: fixed connection issues with %any as identifier
  - L2TP: fixed authentication credentials validation
  - Modbus Client: fixed label for 'no_bracket' option in requests
  - MQTT Broker: fixed incorrect "Local port" hint
  - RMS: fixed 'Next connection after' timer display
  - RMS: fixed transition from 'Standby' to 'Enabled' mode
  - SMPP: fixed sequence number in DELIVER_SM packets
  - SMS Gateway: fixed connecting to Gmail with TLS certificate validity verification in Email to SMS
  - SMS Utilities: fixed "SIM Card" option select list in "Change mobile settings" rule
  - Stunnel: fixed issue of global settings sometimes not being displayed
  - Stunnel: made "Certificate File" and "Private Key" fields required when server mode is configured
  - Wireguard: fixed peer allowed IPs select dropdown to show IPv6 options and added the ability to include custom values
  - Wireguard: fixed MTU issues when default route is used
  - Wireguard: fixed tunnel not re-establishing when failover is used
- System
  - Access Control: fixed HTTPS certificates validation to not allow RSA key length less than 1024 bits and ECC key length less than 160 bits
  - API Core: fixed session validation issues
  - Certificates: fixed SCEP certificate enrollment compatibility issues with certain servers
  - Certificates: fixed SCEP certificate generation
  - System Status: removed bootloader version information if it does not exist
  - WebUI: fixed inconsistent spacing between page elements
  - WebUI: fixed warnings still being displayed after removing uploaded certificates
  - WebUI: fixed issues with SDK API path recognition

OTD5_R_00.07.14.3 | 2025.05.26

Fix
- Services
  - L2TP: fixed a connection problem when using an L2TP over IPsec configuration
- System
  - Custom Scripts: fixed execution of custom scripts after upgrade

OTD5_R_00.07.14.2 | 2025.05.09

Note: If a system upgrade with keep settings is performed from R_00.07.14 or R_00.07.14.1 to this version, follow the instructions described under those firmware versions below to resolve Data Limit and traffic monitoring issues.

Fix
- Network
  - Firewall: fixed HTTP and HTTPS ports migration for DMZ port forwards rules
  - Firewall: fixed DMZ port forward rule for mobile DHCP lease renew
  - Network: fixed data limit database save when upgrading with keep settings

OTD5_R_00.07.14.1 | 2025.05.06

Note: This firmware version has been withdrawn due to an issue affecting the Data Limit, traffic monitoring functionalities.

Note: If a system upgrade with keep settings was already performed from R_00.07.14 to this version, previous Data Limit tracking and traffic monitoring information cannot be restored. However, to keep current traffic monitoring history after next update, the command found in the Note below must be executed in CLI.

Note: If a system upgrade with keep settings is performed from this firmware version to newer and R_00.07.14 was never used, following command must be executed in CLI before upgrade to resolve Data Limit and traffic monitoring issues.

mkdir -p /usr/local/lib/upgrade/keep.d && echo /usr/local/usr/lib/mdcollectd/mdcollectd.db_new.gz > /usr/local/lib/upgrade/keep.d/mdcollect

Fix
- System
  - RutOS: fixed curl compilation in SDK
CVE Patches
- CVE-2025-2704

OTD5_R_00.07.14 | 2025.04.24

Note: This firmware version has been withdrawn due to an issue affecting the Data Limit, traffic monitoring functionalities.

Note: If a system upgrade with keep settings is performed from this firmware version to newer, following command must be executed in CLI before upgrade to resolve Data Limit and traffic monitoring issues.

mkdir -p /usr/local/lib/upgrade/keep.d && echo /usr/local/usr/lib/mdcollectd/mdcollectd.db_new.gz > /usr/local/lib/upgrade/keep.d/mdcollect

New
- Network
  - Mobile: added support for eSIM to SIM idle protection
  - Mobile: added eSIM confirmation code support
  - Mobile: added SIM switch rule "On SIM not inserted"
- Services
  - AWS IoT Core: added Device Provisioning
  - L2TP: added L2TP over IPv6 support
  - MQTT Broker Bridge: added v5.0 bridge protocol support
- System
  - RutOS: enabled a read-only root filesystem to ensure system integrity and security
  - WebUI: added Ukrainian language support
Improvements
- Network
  - DHCP: added title for action column in custom DHCP option table
  - DHCP: added a warning message when multiple interfaces share the same device and have DHCPv4 enabled
  - DNS: updated the "Custom Redirect" option to support domain wildcard (*) pattern matching
  - DNS: made the "DNS Server" field optional for the "Custom Redirect" option
  - Firewall: improved "intra" zone column names for clarity
  - Mobile: added UCS2 conversion for service provider name
  - Mobile: improved non default SIM card unlock procedure after PIN/PUK is entered
  - Ports Settings: reordered network > ports sub-menu and made port settings page first
  - SSHFS: updated mount point location
  - SSHFS: added connection and mount point status
  - Topology: removed Mobile WAN interfaces from topology scan
  - Topology: improved network scanning
  - Topology: added port number to topology scan results
  - Topology: added IPv6 support
  - VRF: added section name generation and changing ability
  - Curl: updated version to 8.12.0
  - wireless-regdb: updated version to 2024.10.07
- Services
  - Call Utilities: added the ability to update authorization settings for multiple rules via the "Actions" drop-down in the "Call rules" table
  - Call Utilities: moved multiple rule enabling to the "Actions" drop-down in the "Call rules" table
  - Call Utilities: added filtering option for "Action name" column in the "Call rules" table
  - Data to Server: changed new instance to be turned off by default
  - Dynamic DNS: made WebUI show IP updates earlier than the configured DDNS service check interval
  - EoIP: added improvements to avoid packet loops
  - Events juggler: removed Reboot after Input/Output option
  - Events juggler: changed new instance to be turned off by default
  - Events juggler: removed Custom HTTP headers space validation
  - IPsec: enabled dead peer detection by default
  - Post/Get - Mobile: removed package
  - PPTP: added options for 'MPPE' configuration to WebUI
  - PPTP: added 'Custom options' field to configure custom pppd options
  - SMS Utilities: added rule description hints on "Action" table column values
  - SMS Utilities: added the ability to update authorization settings for multiple rules via the "Actions" drop-down in the "SMS rules" table
  - SMS Utilities: moved multiple rule enabling to the "Actions" drop-down in the "SMS rules" table
  - SMS Utilities: added filtering options for "Action name" and "Authorization method" columns, and sorting for "SMS text" column in the "SMS rules" table
  - SMS Utilities: added default rule response messages
- System
  - Events Log: added events log file export
  - Profiles: improved table data UI
  - Recipients: changed email maximum password length to 128 characters
  - Recipients: improved "phone groups" page to support unlimited phone numbers additions
  - Setup Wizard: removed host, port options and proxy settings section from RMS setup wizard
  - WebUI: added measurement units for "data limit" cards in overview page
  - WebUI: removed default password icons on "Internet Explorer" and "Microsoft Edge" browsers
  - Kernel: updated version to 5.10.234
  - Time Zone Database: updated version to 2025a
Fix
- Network
  - Dynamic routes: fixed OSPF issues of not displaying instances of 'area' and 'networks' sections
  - Firewall: fixed certain "Attack prevention" limits making device unreachable
  - Firewall: fixed attack prevention page with missing traffic rules
  - Mobile: fixed mobile disconnections when DMZ is enabled
  - Mobile: fixed unintended re-creation of eSIM profile network interfaces after deletion
  - Mobile: fixed APN selecting from a database with IPv4v6 PDP data type
  - Multi WAN: fixed incorrect WAN state being displayed when using failover
  - Ports Settings: fixed port status speed badge for Ethernet(10mbps)
  - Static Routes: fixed API incorrectly returning mobile interfaces
  - VXLAN: fixed package installation not starting service properly
- Services
  - Data to Server: fixed GSM IP and IPV6 retrieval when used SIM slot is changed
  - Data to Server: disallowed enabling Azure plugin without required options
  - Data to Server: fixed editing Azure plugin configuration when "Device Provisioning Service" option is selected
  - DNP3 Client: fixed an issue where application would terminate on startup
  - Email Relay: fixed service crash when server tls certificate is used
  - Events juggler: fixed broken port link speed reporting
  - Events juggler: fixed Mobile data limit event type validation
  - Events juggler: fixed condition bug on some plugins
  - Events juggler: fixed LUA condition script support to correctly handle return values
  - Messages: fixed "Date" row displayed values on smaller screens
  - Mobile Utilities: fixed Manage OpenVPN rule
  - RMS: fixed serial code copy button not being displayed
  - SMS Gateway: fixed the duplicate SMS issue in "Email to SMS"
  - SMS Utilities: fixed "SMS text" option validation when enabling rules in "SMS rules" table
  - SSTP: fixed the issue of the instance starting after upgrading the firmware
  - Wireguard: fixed connection issues when peer is on the same network
- System
  - API Core: fixed file upload issue which sometimes made WebUI unresponsive
  - NTP: fixed time servers limit validation
  - Package Manager: fixed displaying multiple same functionality buttons when package update fails
  - Password Policy: fixed special characters validation
  - Profiles: fixed loading screen reappearing after profile change fails
  - Recipients: fixed email address validation
  - Side Widget: fixed port icons overlapping on mobile in port status card
  - WebUI: fixed enabled button being removed in some cards on medium sized screens
CVE Patches
- CVE-2022-42721
- CVE-2023-7104
- CVE-2023-31489
- CVE-2024-9143
- CVE-2024-13176
- CVE-2025-0167
- CVE-2025-0665
- CVE-2025-0725

OTD500_R_00.07.13.4 | 2025.04.04

Improvements
- System
  - RutOS: updated libubox
Fix
- Network
  - Mobile: fixed handling of 18 character long ICCID for eSIM
- System
  - RutOS: fixed occasional ubus page fault after package install
  - RutOS: fixed user group duplicate entries after applying backup

OTD500_R_00.07.13.3 | 2025.03.21

Fix
- Network
  - Multi WAN: fixed internet not being reachable from device when main WAN is down
- Services
  - RMS: fixed connection retry interval count

OTD500_R_00.07.13.2 | 2025.03.18

Fix
- Network
  - Multi WAN: fixed occasional IPsec startup issue after reboot with Multi WAN enabled

OTD500_R_00.07.13.1 | 2025.03.06

Fix
- System
  - Auto Reboot: fixed an issue causing the device to reboot immediately

OTD500_R_00.07.13 | 2025.03.03

Note: This firmware was removed due an issue with Auto Reboot functionality performing unnecessary device reboot.

New
- Network
  - BFD: added service
  - Mobile: added bandwidth rate limiting control when a specified data usage threshold is reached
  - Mobile: added "internet.telia.iot" APN for Telia carrier
  - Mobile: added "mobile.iot" APN for Elisa carrier
  - Mobile: added "dm.jplat.net" APN for HIS carrier
- Services
  - EoIP: added service
  - Events juggler: added service
- System
  - Update Firmware: added link to FW & SDK download page
Improvements
- Network
  - Dynamic routes: added validation for NHRP to prevent using same interface on multiple instances
  - Firewall: added possibility to manually specify conntrack helper for a port forward rule
  - Firewall: moved IPtables NAT extra to package manager
  - Mobile: improved data limit and SMS limit SIM switch rule behavior
  - Mobile: improved SIM switch service behavior when changing configuration
  - Mobile: updated 5G bands selection to display 5G mode
  - Mobile: improved eSIM profile delete functionality
  - Mobile: improved handling for the maximum number of active interfaces
  - Mobile: added inactive eSIM profile display
  - Mobile: improved operator name parsing from SPN file
  - Static Routes: improved descriptions for routing rules
  - Topology: moved to package manager
  - VRF: moved page from Network sub-menu to Network > Routing
  - iperf3: updated version to 3.17.1
- Services
  - Dynamic DNS: added support for using local openvpn interface ip address
  - Hotspot: added MAC address delimiter and case setting for Radius MAC authentication
  - Hotspot: improved API validations
  - IPsec: added ChaCha20-Poly1305 encryption algorithm
  - IPsec: improved performance when using GCM encryption
  - IPsec: added periodic connection check
  - Modbus Client: added store on data change mode
  - Modbus Client: added ability to choose where to save database
  - MQTT Modbus Gateway: improved constant $$NAME that can be defined in system configuration
  - OpenVPN: improved statuses for instances
  - OpenVPN: removed 'persist-tun' and 'persist-key' options from default configuration
  - OpenVPN: enabled DCO support for CHACHA20-POLY1305 cipher
  - OpenVPN: improved performance when using DCO-supported ciphers
  - SMS Gateway: moved Email to SMS service to Package manager
  - SMS Utilities: changed format of ADC and ACL status
  - SMS Utilities: added a new option "Send response SMS" which allows receiving action response message
  - Zerotier: added ability to upload a custom planet file
- System
  - Access Control: improved UX when disabling HTTP and HTTPS local access settings
  - Administration: added confirmation prompt when changing profiles
  - Administration: updated hostname validation to allow numeric-only hostname
  - Package Manager: added confirmation prompt when closing uploaded package modal
  - Security: changed password policy to require at least one special character
  - System Users: changed username validation to allow dots and underscores
  - Update Firmware: added link to changelog page
  - WebUI: removed basic/advanced mode
  - WebUI: updated Teltonika logo
  - Kernel: updated version to 5.10.233
Fix
- Network
  - 802.1X Server: fixed a segfault that sometimes occurs when port state changes to down
  - Devices: fixed error handling for deleting non-existent bridge sections
  - DHCP: fixed an issue where DHCP Relay mode did not work with an active IPv4 mobile connection
  - Firewall: fixed automatic conntrack helper not being assigned for port forward rules in some cases
  - Firewall: fixed traffic rules "start_date" and "stop_date" option validations failing due to incorrect format
  - Firewall: fixed incorrectly restricted AF23 value for traffic rule's DSCP option
  - Mobile: fixed parsing of large data from the module's serial port
  - Multi WAN: fixed pings being lost for backup wired wan interfaces
  - Network: fixed interfaces being displayed in the wrong page after updating with keep settings
  - Network: fixed a name duplication validation error that occurred between the network interface and the VRF instance
  - Network: fixed API failing to sort specific network interface configurations
  - Network: fixed interface remove button disable state being shown only after status is loaded
  - Network: fixed LAN interfaces sometimes not getting IPv6 prefix assigned on creation
  - Network: fixed DHCP lease sometimes not updating when changing mobile mode
  - Static Routes: fixed missing route type validation for API
  - VXLAN: made "Remote address" field required
- Services
  - Data to Server: fixed the OPC UA, DLMS, MBUS, and impulse counter inverted filtering logic
  - Data to Server: fixed "Invert filter" option to be hidden when using "DLMS" type and "Data filtering" option is selected to "All"
  - DLMS: fixed DLMS endpoint parameter validation
  - DLMS: fixed device option data type validation for connections endpoints
  - DLMS: fixed an issue where DLMS service could not read extended register type COSEM objects and display incorrect scaler value
  - DLMS: fixed an issue where non-persistent connections did not close properly
  - DMVPN: fixed NHRP multicast NFLOG group option not setting
  - Hotspot: fixed bandwidth limits setting with "chilli_query" command
  - Hotspot: fixed preserving Hotspot users between firmware upgrades
  - IPsec: fixed status display when compatibility mode is used
  - IPsec: fixed connections not terminating if instance is disabled
  - IPsec: fixed route based ipsec mode
  - L2TP: fixed occasional device hangs when routing L2TP traffic with "Software flow offload" enabled
  - Modbus Client: fixed API error when 'function' option is not present in alarms/requests configuration POST request
  - Modbus Client: fixed reusing connection in Modbus client Modbus request alarm action
  - Modbus Client: fixed email alarm action when TLS is enabled
  - Modbus Client: fixed alarm issues related to modem
  - MQTT Modbus Gateway: fixed client ID validation
  - NHRP: fixed missing dependencies
  - OpenVPN: fixed issues related to warnings when using external services
  - RMS: fixed the "Connection state" status displayed as JSON when device language was set to anything other than English
  - SMPP: fixed the "TLS/SSL" option to be visible even when the configuration is not enabled
  - SNMP: fixed validation to prevent creating or editing analog_type trap instances in devices that do not support this functionality
- System
  - Access Control: fixed "redirect_https" option reset after device reboot
  - Access Control: fixed default HTTPS CA certificate generation
  - Date & Time: fixed time synchronization with the browser when using Europe/Kyiv timezone
  - Package Manager: fixed spinner position in package table
  - Package Manager: fixed possible config migration issues for installed packages
  - Update Firmware: fixed unnecessary FOTA requests when FOTA is disabled
CVE Patches
- CVE-2022-49043
- CVE-2024-5290
- CVE-2024-9287
- CVE-2024-11053
- CVE-2024-34459
- CVE-2024-53580
- CVE-2024-56171
- CVE-2025-24928
- CVE-2025-27113

OTD500_R_00.07.12.3 | 2025.02.14

New
- Services
  - Modbus Client: added an endpoint that returns status for a single Modbus request
Fix
- Network
  - Mobile: fixed provider name parsing from SPN file
- Services
  - IPsec: fixed kernel warnings when custom NAT rules are used with "IPsec Software Flow Offload" enabled
  - OpenVPN: fixed an issue with config file parsing when carriage return characters were present
  - OpenVPN: fixed parsing of the 'Protocol','Port' and 'LZO' options from the config file

OTD500_R_00.07.12 | 2025.01.20

New
- Network
  - Mobile: added "global" APN for "Jersey Telecom" operator to APN database
  - Mobile: added "datasim.com" APN for "BT" operator to APN database
  - Mobile: added "datasim.com" APN for "Vodafone" operator to APN database
  - Mobile: added "datasim.com" APN for "Vodafone" operator to APN database
  - Mobile: added "datasim.global" APN for "Telefonica" operator to APN database
  - Mobile: added "soracom.io" APN for "Soracom" carrier to APN database
  - VXLAN: moved VXLAN package to PM
- Services
  - Dynamic DNS: added IPv6 support
Improvements
- Network
  - DHCP: added leased IP status in DHCP server page
  - DNS: added DNS strict order option
  - Firewall: moved target field to the bottom of NAT rule edit and renamed it to "Action" to match traffic rules
  - Firewall: moved all traffic rule fields related to action to be below action field
  - Firewall: removed ability for any firewall rules to have port selection if protocol is set to "all"
  - Firewall: separated zone and global firewall settings into different pages
  - Firewall: improved "Conntrack helpers" field in zone edit by making it disabled with explanation instead of hiding it
  - Mobile: improved deny data roaming to prevent connection issues after re-enabling roaming
  - Mobile: improved error messages for eSIM profile downloads
  - Mobile: improved active SIM display in tabs and status pages
  - Mobile: improved modem signal value filtering
  - Mobile: improved DNS checking across different interface PDP types
  - Network: fixed configuration viewing in the WAN page when user has only read permission
  - UDP Relay: moved service menu item from Network > Other > UDP Relay to Network > UDP Relay
  - VRF: added additional validations to address used device cases
  - VXLAN: separated edit form options into general and advanced tabs
  - Curl: updated version to 8.11.0
- Services
  - DLMS: added ability to view COSEM objects for each scanned physical device in overview page
  - IPsec: improved AES-CBC performance
  - NTP Client: updated 'Count of failed NTP requests' option to permanently synchronize with mobile operator when NTP servers fail
  - Overview: added IP type status to network interface cards
  - SMS Utilities: changed format of ADC and ACL status
  - azure-iot-sdk-c: updated version to LTS_08_2024
- System
  - API Core: added query parameter for configuration GET endpoints to receive all options, even if unset
  - Certificates: moved "Let's Encrypt" functionality to Package Manager
  - Package Manager: removed "Installed Version" and "Available Version" columns from the package table
  - Kernel: updated version to 5.10.229
Fix
- Network
  - 802.1X Server: updated radius secret back-end validation to match front-end validation
  - Dynamic routes: fixed dynamic routes not starting after installation on rare occasions
  - Firewall: deprecated invalid dest_local option in traffic rules API
  - Firewall: fixed zone placement in NAT rule description
  - Mobile: fixed eSIM profile configuration when multiple profiles are available
  - Mobile: fixed cell ID parsing on 2G networks
  - Mobile: fixed modem information collection after firmware installation
  - Mobile: fixed repetitive mobile band configuration on startup
  - Mobile: improved operator name parsing when information is unavailable on the SIM card
  - Mobile: fixed SMS limit displaying incorrect reset date
  - Mobile: fixed an issue where duplicate APN could be configured
  - Mobile: fixed eSIM plugin crash on modem info parsing
  - Mobile: fixed LAC/TAC display in mobile status page
  - Mobile: fixed an issue where incorrect SIM was selected
  - Mobile: fixed displaying 5G SA mobile signal properties in real-time data page
  - Mobile: fixed an issue where SIM card pin code would be stored as "N/A"
  - Network: fixed missing PPPoE username and password validations
  - Ports Settings: fixed incorrect warning message for identical port configurations
  - Ports Settings: fixed an occasional infinite spinner issue when changing port settings
  - QOS: fixed source and destination host field validation to allow subnet in CIDR notation
  - QOS: fixed starting SQM after reboot when QoS package is installed
  - Static Routes: fixed interface select not showing SSTP instances
  - VLAN: fixed wrong error message when deleting a VLAN that does not exist
  - VRF: fixed an issue that prevented saving the configuration when an inactive VLAN was selected
- Services
  - DLMS: fixed parameters table not always refreshing when selecting devices
  - DLMS: fixed mismatched name validations between API and WebUI
  - DLMS: fixed an issue where uptime becomes incorrect when system time changes
  - DNP3 Client: fixed API error when non existent parent id is provided in requests endpoint URL
  - DNP3 Client: fixed an issue where uptime becomes incorrect when system time changes
  - DNP3 Outstation: fixed an issue where uptime becomes incorrect when system time changes
  - IPsec: increased maximum length of local / remote identifiers and selector ID to 255 characters
  - IPsec: fixed deleting global secrets when more than one ipsec instances are configured
  - IPsec: fixed IPsec not reloading after DMVPN uninstall
  - IPsec: fixed showing empty error messages after instance deletion
  - IPsec: fixed excessive logging
  - IPsec: fixed firewall rules migration and identifier setting when certificate authentication is used
  - Modbus Client: fixed configuration files not being removed after package removal
  - Modbus Client: fixed an issue where uptime becomes incorrect when system time changes
  - Modbus Server: fixed configuration files not being removed after package removal
  - Modbus Server: fixed an issue where uptime becomes incorrect when system time changes
  - MQTT Modbus Gateway: fixed configuration files not being removed after package removal
  - MQTT Modbus Gateway: fixed an issue where uptime becomes incorrect when system time changes
  - NTP Client: fixed Count of time synchronizations that was not working properly
  - OPC UA Client: fixed URL validation
  - OPC UA Client: fixed configuration files not being removed after package removal
  - OPC UA Client: fixed API security mode option require validation
  - OPC UA Client: fixed an issue where uptime becomes incorrect when system time changes
  - OPC UA Client: fixed validation for prefix, midfix, postfix options
  - OPC UA Server: fixed configuration files not being removed after package removal
  - OPC UA Server: fixed API encryption option require validation
  - OPC UA Server: fixed an issue where uptime becomes incorrect when system time changes
  - OpenVPN: fixed the problem related to the 'netlink reports object not found' warning when using the DCO configuration
  - SNMP: fixed mwan3Ip to display 'N/A' if no IPs are present
  - TR-069: fixed ConnectionRequestURL node to return VPN IP address if VPN is used
  - Web Filter: fixed site blocking rules affecting router itself when selecting specific network interface
  - Web Filter: added exception to FOTA server blocking
  - Web Filter: fixed site blocking not working with Hotspot
  - Web Filter: fixed whitelist not working with domains that have forwards to other domains
- System
  - Certificates: fixed issue where the API allowed the deletion of root certificate
  - Certificates: fixed uploading of certificates that are 4096 bits or longer
  - Package Manager: added protection against zip bombs when uploading a package
  - PAM: fixed creating new instance
  - WebUI: fixed SDK example app validation mismatch between UI and API
  - WebUI: fixed default value display on instances for multiple services
CVE Patches
- CVE-2024-5594
- CVE-2024-9681
- CVE-2024-29195

OTD500_R_00.07.11.3 | 2024.12.17

Fix
- Services
  - Wireguard: fixed field validation after firmware upgrade
  - OpenVPN: fixed the certificate file selection issue in the server configuration

OTD500_R_00.07.11.2 | 2024.12.09

Fix
- Services
  - IPsec: fixed loading connections using AEAD algorithms
  - IPsec: fixed connection status display
  - IPsec: fixed Local source IP option
  - IPsec: fixed issue with multiple global secrets of same type

OTD500_R_00.07.11.1 | 2024.12.02

Initial firmware release