Advantech 4G/LTE Router Firmware 6.3.1

Patch release of the firmware version 6.3.1. Let's have a look at some improvements and fixes. As always security first. Full change log can be found in Release Notes.

Let's start with some security updates:

• Fix Linux Kernel Vulnerabilities

  • This update has fixed CVE-2020-24586 (low), CVE-2020-24587 (low), CVE-2020-24588 (low), CVE-2020-26139 (medium), CVE-2020-26147 (medium), CVE-2020-26558 (medium), CVE-2020-36386 (high) in the Linux kernel.

• Update dhcp-isc program

  • We have updated the dhcp-isc program to version 4.1-ESV-R16-P1. This update has fixed CVE-2021-25217 (high). For more details about this release, see the webpage at https://downloads.isc.org/isc/dhcp/4.1-ESV-R16-P1/dhcp-4.1-ESV-R16-P1-RELNOTES.

• Update curl program

  • We have updated the curl program to version 7.78.0. This update has fixed CVE-2021-22897 (medium), CVE-2021-22898 (low), CVE-2021-22901 (high), CVE-2021-22922, CVE-2021-22923, CVE-2021-22924, CVE-2021-22925 and CVE-2021-22926. For more details about this curl release, see https://curl.haxx.se/changes.html#7_78_0.

• Update strongSwan Software

  • We have updated the strongSwan software to version 5.9.3. For more details about this release, see the webpage at https://github.com/strongswan/strongswan/releases/tag/5.9.3.

New features

Important security updates out of the way, we can look at new addition to web interface and new programs added.

MTU and MRU for PPTP and L2TP

• PPTP: Two new options in the PPTP configuration page available to configure the MTU (Maximum Transmission Unit) and the MRU (Maximum Receive Unit) parameters. The default value for both options is 1460 bytes to avoid sending fragmented packets.
• L2TP: Two new options in the L2TP configuration page available to configure the MTU (Maximum Transmission Unit) and the MRU (Maximum Receive Unit) parameters. The default value for both options is 1400 bytes, the same as used so far.

Number of FW Rules Increase

Total amount of the firewall rules, that can be configured on the Firewall configuration page, was increased from eight to sixteen rules for both, the incoming and forwarded packets.

Fix IPsec Issue

Fixed the IPsec SA checking for when multiple tunnels with the same IDs and different local or remote subnets are established. This issue was introduced in the firmware 6.3.0.

WiFi Firmware and Driver Update

We have updated the firmware of the Laird SU60 WiFi module to version 5.5.38.5.

Download