RUTM20 Firmware Downloads

Main Page > RUTM Routers > RUTM20 > RUTM20 Firmware Downloads

This page contains firmware files for RUTM20 devices. Look to the table below or the changelog to find download links.

Stable firmware - this version has been tested through both internal QA processes and large-scale user deployments. All known issues have been resolved based on user reports and testing feedback. Stable firmware is currently used as the default for updates and is also deployed in mass production. To upgrade firmware using WebUI, follow the instructions in RUTM20 Firmware.
Latest firmware - this is the most recent firmware release, featuring the latest updates, features, and fixes. While it has passed internal testing, it has not yet undergone widespread deployment or user validation. It may still contain undiscovered issues. We recommend testing on a small number of devices before considering broader updates.

Note: packages for Package Manager are independent from firmware and can be downloaded in the Package Downloads page.

RUTM20

File	Type	Release date	Size	MD5	Links
RUTM_R_00.07.19.4_WEBUI.bin	Stable FW	2025.12.05	27 MB	e329162d5187243dcbd21916fb249a27	Changelog API
RUTM_R_00.07.20.1_WEBUI.bin	Latest FW	2026.01.05	27 MB	acefd710405895cd4090b0f541291b33	Changelog API
RUTM_R_SDK_00.07.20.1.tar.gz	SDK	2026.01.05	46 MB	2e53c88305d3294b8f917cfb6d437a44

FW checksums

Checksums for firmware files can be found here.

Changelog

RUTM_R_00.07.20.1 | 2026.01.05

Fix
- System
  - Boot: fixed WAN ethernet led behaviour during boot on devices with specific hardware version
- Services
  - DDNS-scripts: improved core handling of user input

RUTM_R_00.07.20 | 2025.12.16

New
- Network
  - Mobile: added "mobileinternet.tele2.lt" APN for "Tele2" operator to APN database
  - Wireless: added support for a global installation type option for radio devices
- Services
  - Data to Server: added IEC 60870-5 Client as an input
  - IEC 60870-5 Client: added IEC 60870-5-104 Client
  - IEC 60870-5 Server: added IEC101 and IEC104 support
- System
  - Package Manager: added CIFS/SMBFS filesystem support
Improvements
- Network
  - 802.1X Client: updated 802.1x validation so that 802.1x client can no longer be enabled on a port that is disabled
  - 802.1X Server: updated 802.1x validation so that 802.1x server can no longer be enabled on a port that is disabled
  - DHCP server: improved "DHCPv6-Mode" field's option names and hints
  - Mobile: improved log message when no primary SIM is set
  - Mobile: improved DFOTA log message when checking for updates
  - Mobile: added creation of mobile network interface on eSIM profile installation if one does not exist
  - Mobile: added "Switch to next SIM" button in 'Status -> Mobile' page
  - Mobile: improved mobile data connection establishment time
  - Mobile: improved mobile connection bring up behavior when the "Service option not subscribed" error is received
  - Multi WAN: added IPv4 and IPv6 WAN interface coexistence warning
  - Network: improved "Force link" field hint
  - Network: fixed "Force link" field to respect default value when changing interface protocol
  - SSHFS: updated setting fields to be shown when service is disabled
  - SSHFS: added directory as prefix to "Mount point" field
  - ethtool: updated version to 6.10
- Services
  - AWS IoT Core: updated orange error status to be red
  - Azure IoT Hub: updated status columns to use text badges instead of circle icons
  - Data to Server: updated input sections to be toggleable
  - Data to Server: added certificates to global certificate manager
  - Data to Server: increased the limit for Modbus data filtering entries
  - Event juggler: added certificates to global certificate manager
  - I/O Juggler: added certificates to global certificate manager
  - I/O Status: moved all custom I/O configuration from table to the edit
  - I/O Status: updated all I/O pinout and Power pinout icons
  - L2TP: improved adding custom options to the configuration

- - MQTT Broker: added certificates to global certificate manager
  - MQTT Broker Bridge: added certificates to global certificate manager
  - MQTT Publisher: added certificates to global certificate manager
  - SMPP: added certificates to global certificate manager
  - SNMP: added additional info to Trap message
- System
  - Certificates: changed SCEP enrollment to try AES first and fall back to 3DES
  - RutOS: updated login banner to include internal API usage
  - Kernel: updated version to 6.6.115
Fix
- Network
  - 802.1X Client: fixed incorrectly displaying port link state
  - Firewall: removed low contrast zone colors
  - Mobile: fixed failure to create network interface configuration section for a new eSIM profile
  - Mobile: fixed SMS Limit excessive logging
  - Network: fixed PPPoE client options not being removed after switching to other protocol
  - Network: fixed routing table rules not matching interface metric order
  - Realtime Traffic: fixed traffic history not showing up in some cases
  - Realtime Traffic: fixed plot background rendering when switching between plots
  - Realtime Traffic: fixed plot popover position on Firefox 143 and later
  - Wireless: fixed latency spikes after wireless roam
  - Wireless: fixed authentication timeout during fast transition
  - Wireless: fixed retrieving empty cached wireless scan results
- Services
  - Azure IoT Hub: fixed empty status hint
  - DNP3 Client: fixed display issues with long request names
  - DNP3 Outstation: fixed display issues with long request names
  - Dynamic DNS: fixed bind-nsupdate method not working on multi-level subdomains
  - Event juggler: fixed HTTP action request type
  - Hotspot: fixed session data delete when deleting user
  - IPsec: fixed unstable connections with software flow offloading enabled
  - L2TP: fixed log display in WebUI
  - Modbus Client: fixed duplicate query parameters validation in database entries endpoint
  - Modbus Client: fixed display issues with long request names
  - Modbus Server: fixed display issues with long request names
  - MQTT Broker: fixed 'Allow persistence' option
  - OPC UA Client: fixed duplicate query parameters validation in database entries endpoint
  - OPC UA Client: fixed API error when 'server_node' option had an incorrect type in group values test endpoint
  - OpenVPN: fixed status in Static Key Authentication mode
  - OpenVPN: fixed handling of 'user' and 'group' parameters
  - RMS: fixed connection status jumping between "Connecting" and "Connected" states
  - SMS Utilities: fixed script action execution when arguments are provided
- System
  - Certificates: fixed importing DER keys to TPM
  - RutOS: fixed rare UCI deadlock causing system hangs
  - Speed Test: fixed selecting WAN interface when using servers with IPv6 support
  - System Users: fixed redundant /etc/group member creation
  - WebUI: fixed target area that triggers hint text
CVE Patches
- CVE-2025-46394 - 3.3 (LOW)

RUTM_R_00.07.19.4 | 2025.12.05

Fix
- Network
  - Mobile: fixed operator selection under specific conditions

RUTM_R_00.07.19.2 | 2025.11.26

Fix
- System
  - Update Firmware: fixed firmware download cancellation

RUTM_R_00.07.19.1 | 2025.11.12

Fix
- System
  - WebUI: fixed unresponsive navigation after password change

RUTM_R_00.07.19 | 2025.11.06

New
- Network
  - Mobile: added "web.unomobile.it" APN for "1Mobile" operator to APN database
Improvements
- Network
  - DHCP server: added message to Events Log when there are no available DHCP addresses
  - Firewall: added status to Traffic Rule page
  - Firewall: added status to Port Forwards page
  - Firewall: added status to NAT page
  - Firewall: added status to DMZ page
  - Firewall: updated status page to have chain and rule tables for better searchability
  - Firewall: added shortcuts from firewall rules in status page to firewall configurations that created them
  - HTTPS DNS Proxy: disabled field requirements when service is disabled
  - Mobile: improved mobile operator parsing for connection establishment
  - Mobile: added support for eSIM to Mobile Usage page
  - Mobile: updated default SIM selection in Mobile General page
  - Mobile: added switch to disable local DHCPv4 leases when operating in bridge mode
  - Mobile: added more information about SIM state changes in logs
  - Mobile: improved error handling during mobile data connection bringup
  - NAT64: added status to NAT64 page
  - Network: improved DHCP client and server related fields
- Services
  - Cloud of Things: changed communication from HTTP to MQTT
  - Cumulocity: changed communication from HTTP to MQTT
  - Data to Server: added new parameters (Custom name and pin value) in I/O input plugin
  - EoIP: added IPv6 support
  - Event juggler: added `io_reset` option
  - GRE: added IPv6 support
  - Impulse Counter: increased status loading speed
  - MQTT Modbus Gateway: added validation to discard responses with invalid ID or function code
  - OpenVPN: improved page load speed by removing duplicate data request
  - SNMP: added SET support for universal gateway tag value table
  - Stunnel: added support for using IPv6 addresses in the connect IPs field
  - Wireguard: added wireguard watchdog support
  - cURL: updated version to 8.16.0
  - OpenVPN: updated version to 2.6.14
- System
  - Custom Scripts: added page loading spinner
  - Speed Test: added support for custom server url
  - Update Firmware: improved FOTA communication and caching logic
  - WebUI: improved usability on small screens
  - Kernel: updated version to 6.6.108
  - PAM: updated version to 1.7.1
Fix
- Network
  - DHCP server: fixed DHCPv6 server reload when changing VLAN
  - DNS: fixed "Static addresses" and "Custom redirect" field required validation
  - Dynamic routes: fixed services other than EIGRP restarting on network change
  - Firewall: added IPsec and OpenConnect configurations as possible networks
  - Firewall: fixed NAT extra custom rules not applying after FW upgrade
  - HTTPS DNS Proxy: fixed DNS requests failing after obtaining new IP
  - Mobile: fixed informational messages when SIM configuration is not found
  - Mobile: fixed configuration files after ESIM deletion
  - Mobile: fixed IPv4/IPv6 type mobile reconnection loop if one type has unsuccessful connection
  - Mobile: fixed updating modem firmware when custom root CA is configured
  - Mobile: fixed eSIM profile display for profiles without provider value
  - Mobile: fixed missing modem firmware version after modem firmware update
  - Multi WAN: fixed Multi WAN interface creation
  - Wireless: fixed invalid mesh interface encryption data reporting
  - Wireless: fixed excessive Wi-Fi service log file creation due to service restarts
  - Wireless: fixed "Allow legacy 802.11b rates" option not working properly
  - Wireless: fixed missing background scan data in learn mode
- Services
  - DLMS: fixed access error when reading an empty sort object attribute on a generic profile object
  - DLMS: fixed "Entries" not being clamped for "Profile generic" COSEM type
  - DMVPN: fixed custom changes in IPsec, GRE and NHRP pages being reverted when saving DMVPN instance
  - DNP3 Client: fixed dnp3 test function printing analog values in wrong format
  - DNP3 Client: fixed always shown warning notification by displaying status hints for affected requests
  - Dynamic DNS: fixed "Check interval" and "Force interval" validation issues
  - Email to SMS: fixed process hang during email handling
  - Impulse Counter: fixed duplicate values in 'GPIO pin' dropdown
  - Impulse Counter: fixed deleting impulse counter data records
  - IPsec: fixed an issue where connections could be re-initiated even while being active
  - IPsec: fixed authentication issue when using multiple instances with the PSK authentication method
  - IPsec: fixed Xauth connections not establishing when identifiers are set
  - IPsec: fixed wrong active client information when using certificates
  - IPsec: fixed incorrect uptime display when using multiple responder instances
  - L2TP: fixed L2TP over IPsec connection issue
  - L2TPv3: fixed parameter validation for IPv6 addresses in configuration
  - Modbus Client: fixed email and MQTT alarm actions running longer than intended
  - Modbus Client: fixed always shown warning notification by displaying status hints for affected requests
  - Modbus Client: fixed test request endpoints failing if 'broadcast' option is not provided
  - MQTT Broker: fixed TLSv1.1 configuration
  - OpenConnect: fixed 'Get server fingerprint' feature on IPv6 servers
  - OpenConnect: fixed displaying IPv6 address under Tunnel IP address
  - OpenVPN: fixed parsing uploaded custom OpenVPN configuration
  - OpenVPN: fixed issues with parsed fields being displayed after config deletion
  - OpenVPN: fixed configuration parsing issues related to security options
  - SMS Forwarding: fixed certificate verification disabling
  - Wireguard: fixed creation of routes to endpoint host when default route is not set
- System
  - Access Control: fixed displaying certificates in "HTTPS" edit modal after page refresh
  - Administration: fixed incorrect creation date of user's default configuration
  - API Core: fixed API error on 'DELETE' request with bad payload structure
  - Events Log: fixed sorting reset functionality of table columns and "Event group" column issues
  - Setup Wizard: fixed redirect of "RMS" step
  - System Users: fixed multiple network pages working improperly with non-root users
  - WebUI: fixed "visible columns" button to be clickable for users without "write" permissions
  - WebUI: removed bell notifications from modals
  - WebUI: fixed length validation for custom input values in select lists
  - WebUI: fixed active state of filters on tables
CVE Patches
- CVE-2025-4373 - 4.8 (MEDIUM)
- CVE-2025-6020 - 7.8 (HIGH)
- CVE-2025-6052 - 7.5 (HIGH)

RUTM_R_00.07.18.3 | 2025.10.30

Initial firmware release