Zyxel VMG8623-T50B, EMG5523-T50B, VMG3625-T50B/T50C, EMG3525-T50B/T50C Firmware Release Note

Modifications in V5.50(ABPM.8.1)C0

Base on V5.50(ABPM.8.1)b1 to release V5.50(ABPM.8.1)C0

[FEATURE ENHANCEMENT]

[BUG FIX]

Modifications in V5.50(ABPM.8.1)b1

Base on V5.50(ABPM.8)C0 to release V5.50(ABPM.8.1)b1

[FEATURE ENHANCEMENT]

[BUG FIX]

• [Vulnerability] Post-authentication buffer overflow

Modifications in V5.50(ABPM.8)C0

Base on V5.50(ABPM.8) b5 to release V5.50(ABPM.8) C0

Modifications in V5.50(ABPM.8)b5

Base on V5.50(ABPM.8) b4 to release V5.50(ABPM.8) b5

[FEATURE ENHANCEMENT]

[BUG FIX]

• [MPro Mesh_Agent] When wifi clients connect to RP_Agent, all clients disappear in APP and Connectivity page.
• [GUI] Diagnostic page doesn't work. except Nslookup.
• [TR-143]TR143 HTTP download throughput too low.

Modifications in V5.50(ABPM.8)b4

Base on V5.50(ABPM.8) b3 to release V5.50(ABPM.8) b4

[FEATURE ENHANCEMENT]

• [#230600832] SSID naming logic when disabling mesh and allowing separate SSIDs

[BUG FIX]

• MPro Mesh Guest SSID does not enable on Repeater devices.
• [TR-143] The FTP download throughput can not get value successfully by TR-143 method
• [WLAN] Repeater mode, use HW WPS trigger uplink with GW will fail
• [System] GUI to change other language, description will change other language. But other(ex: title, options) will still show English, NAT > PCP page always show English.
• [System] Create EE and install DU, GUI can't display ZyEE log.
• [TR-069] TR-143 Perform download diagnostic, CPE not work and DiagnosticsStates will show Error_TransferFailed.
• [System] Clicking the Help button the first time will redirect you to the URL, which should match the model number.
• [Stress] Firmware Upgrade Stress testing via TR-069, DUT crazy happened call trace.
• [WAN] Multi Wan: Routing+ Bridge. Reboot CPE, Bridge wan cannot work. If apply Bridge Wan again will work.
• [Stress] Full Loading stress happen call trace. After 4 day, CPE will not send wifi beacon.
• [WLAN] Huawei 20 Pro, Mi 11 Lite 5G, Mi 10T Andrioad smart phone and Mi TV will let CPE call Trace and reboot.
• [Stress] ACS stress testing sending inform and Reboot, CPE happen call trace and the console hang. Only Power LED, LAN LED will show green on.
• [TR-069] GPV TR-098 parameters will return fault code.
• [TR-143] When Upload HTTP TR143 performance, TestBytesSent and TotalBytesSent value are incorrect.
• [#230600833] Disabling Mesh does not bring down the backhaul, which is still broadcasted as a hidden SSID

Modifications in V5.50(ABPM.8)b3

Base on V5.50(ABPM.8) b2 to release V5.50(ABPM.8) b3

[FEATURE ENHANCEMENT]

• Container based F-secure
• GUI translation_ES_NL
• GUI Compact help link adding ito GUI

[BUG FIX]

• [#230300498] NAT is not working properly
• [WLAN] CPE has 802.11 ax mode in 5G wireless page
• [Wi-Fi] 2.4GHz & 5GHz Wi-Fi function has been disabled, the 5GHz wireless button should not be enabled by automatically after 2.4GHz be enabled.
• [GUI] SPV Customer warning message to WEB UI then check GUI warning message, CPE some page warning message location run away
• [WLAN] Enable EasyMesh, Role is an Agent and Login Username is 'admin'. Wifi tab labels do not match the ES definition
• Operation Mode page should show in Wireless tab labes, not show in Maintenance function.
• CPE support ZYEE, Log and Log Settings System Log option not support ZYEE.
• CPE's Connection Request URL pass through wrong way(Random : 1/5)
• [MPro Mesh] VMG8623-T50B Perform Mesh Full Factory Reset --- test failed
• Use TR069 to set HTTPS Enable WAN side Remote MGMT, HTTP services not synchronized to the same settings of HTTPS services.
• [WAN] Internet LED didn't blink when transmitting data with Multi_WAN.
• Subject should NOT be blank for Create a new Certificate or import a Certificate
• [MPro Mesh_Android] When APP to Device List page, it spend long time to refresh.
• [MPro Mesh_Agent] Gateway Internet Speed does not work.
• [MPro Mesh_Agent] After set a schedule rule via APP, the time will be disappear.
• [WLAN] Repeater mode, use HW WPS trigger uplink with GW will fail
• [#230500907] Possible security flaw that allows to retrieve root password

Modifications in V5.50(ABPM.8)b2

Base on V5.50(ABPM.7.4)C0 to release V5.50(ABPM.8)b2

[FEATURE ENHANCEMENT]

• [#221000063]change the wording in SteerStatus
• [#221101418] Partial factory reset option with firmware upgrades.
• [#220701077][System] Soft-Reset feature
• [#230201111] iperf -R not implemented
• Parental Control support Gen2
• Networks Topology
• Support Web http redirect to https.
• [#221200531] Update MCT modem code
• [#221200506]Configuration of the AFTR should be possible with URL
• [#220900410]DHCP option providing CPE firmware version
• [#230100744] bridge config improvement
• [#221101135][VoIP] SIP TLS encapsulation - supports SIP-over-TLS.
• [ETSI EN 303 645] The consumer IoT device shall protect the confidentiality of critical security parameters that are communicated via remotely accessible network interfaces
• Support APP 3.0
• [#220901660]Translation error WIFI password strength
• [#220501388][GUI] Custom warning message to WEB UI
• [ETSI EN 303 645] 5.8-2: The confidentiality of sensitive personal data communicated between the device and associated services shall be protected, with cryptography appropriate to the properties of the technology and usage.
• [ETSI EN 303 645] 5.8-2: The confidentiality of sensitive personal data communicated between the device and associated services shall be protected, with cryptography appropriate to the properties of the technology and usage.
• [ETSI EN 303 645] The consumer IoT device shall protect the confidentiality of critical security parameters that are communicated via remotely accessible network interfaces
• VMG8623-T50B Series support ZYEE

[BUG FIX]

• [#230400106] DNSProxy issue when Primary DNS unreachable
• [#230301653] CurrentTime not reporting in accordance to the TR-069 standard
• [#230201161] enable/disable SSH via ACS

Modifications in V5.50(ABPM.7.4)C0

Base on V5.50(ABPM.7.4)b1 to release V5.50(ABPM.7.4)C0

Modifications in V5.50(ABPM.7.4)b1

Base on V5.50(ABPM.7.3)C0 to release V5.50(ABPM.7.4)b1

[FEATURE ENHANCEMENT]

[BUG FIX]

• [#220701268] Low uplink throughput
• [#221200678] Wrong interface used to answer ping

Modifications in V5.50(ABPM.7.3)C0

Base on V5.50(ABPM.7.3)b1 to release V5.50(ABPM.7.3)C0

Modifications in V5.50(ABPM.7.3)b1

Base on V5.50(ABPM.7.1)C0 to release V5.50(ABPM.7.3)b1

[FEATURE ENHANCEMENT]

[BUG FIX]

• [Security 4.2.9] Unsafe User-Controlled Configuration Data (SMB)
• Zyxel-SI-1433 [Vulnerability] Buffer overflow vulnerabilities and command injection vulnerability
• Zyxel-SI-1441 [Vulnerability] Hidden SSID and symbolic Links in ftpd
• [#221200500] NTP not working if URL contains '-'

Modifications in V5.50(ABPM.7.1)C0

Base on V5.50(ABPM.7.1)b1 to release V5.50(ABPM.7.1)C0

Modifications in V5.50(ABPM.7.1)b1

Base on V5.50(ABPM.7)C0 to release V5.50(ABPM.7.1)b1

[FEATURE ENHANCEMENT]

[BUG FIX]

• [OPAL Generic] GUI Create more than one interface group, the 2nd or latest group name will show empty.

Modifications in V5.50(ABPM.7)C0

Base on V5.50(ABPM.7)b5 to release V5.50(ABPM.7)C0

Modifications in V5.50(ABPM.7)b5

Base on V5.50(ABPM.7)b4 to release V5.50(ABPM.7)b5

[FEATURE ENHANCEMENT]

• [OPAL Generic] GUI translation_ES_NL

[BUG FIX]

• [Stress] After TR-069 stress testing - Reboot + change PPP username/password, DUT did not work properly.
• [WAN] CPE set as Multi-WAN (PPPoE: VLAN 201 (Default GW) + IPoE: VLAN 301) and then CPE VLAN 201 WAN will get VLAN 301 PPPOE IP address after re-connect (Disconnect & Connect button).
• [Security] CPE happen "Invalid memory segment access" after Create Certificate Request
• [#211000655][VoIP] wrong Tone after B-party end the call

Modifications in V5.50(ABPM.7)b4

Base on V5.50(ABPM.7)b3 to release V5.50(ABPM.7)b4

[FEATURE ENHANCEMENT]

[BUG FIX]

• [Vulnerability] Infinite loop in BN_mod_sqrt() of OpenSSL when parsing certificates
• [TR143] Perform upload/download diagnostic, ACS doesn't indicating the Event code "8 DIAGNOSTICS COMPLETE" in the Inform message.
• [WAN] Ethernet model default status, wan cannot get IPv6 address.
• [WAN] Ethernet model IPoE change to PPPoE, broadband page will show WWAN interface
• [WWAN] Ethernet model WWAN cannot work.
• [Route] Ethernet model RIP pge will show WWAN interface.
• [Vulnerability][Generic] cleartext storage of sensitive information vulnerability
• [WLAN] After bootup, DUT internet LED will green on when operation mode is Repeater mode.
• [WLAN] Disable onessid function, enable 5G guest1 SSID via general page or inside card page, the outside card page still display off.
• [WLAN] 5G Guest SSID switch button doesn't link with 2.4G Guest SSID behavior when onessid is enable.
• [IGMP] WLAN can not play VLC channel.
• [LAN] The CPE LAN side RA packets flags are always show M bit = 0, O bit = 1 even user change to another IPv6 address assign method
• [eITS 220201015] NeighboringWiFiDiagnostics is not working correctly.
• [eITS 220100586][WAN] CurrentWAN with VLAN tag cannot work.
• [WAN] Link VDSL is pppoe mode can get IP address then to change to link ADSL, internet LED will not green blinking.

Modifications in V5.50(ABPM.7)b3

Base on V5.50(ABPM.7)b2 to release V5.50(ABPM.7)b3

[FEATURE ENHANCEMENT]

• [OPAL Generic] Italian GUI translation
• [OPAL Generic] GUI translation_DE_RU
• [OPAL Generic] French GUI translation
• [OPAL Generic] Portuguese GUI translation
• [eITS #220300139] support for lan dhcp option 43 suboptions using cwmp to forward acs url
• [eITS #220100965] Support LAN DHCP option 43 suboptions to forward acs url
• [eITS #220200272] MPro Mesh Guest SSID does not enable on Repeater devices.
• [OPAL Generic] Disable the FTP function

[BUG FIX]

• [OPAL Generic] Change WPS button trigger condition
• [eITS #220201027] After FW-Update MTU is set to 0 and all services no longer work
• [GUI] In Wireless page, the GUI block special character behavior are not consistency between SSID & Password field
• [eITS #220100235] VMG3625-T50B-5.50(ABPM.5)F1-DHCP Relay
• [eITS #220100868][System] Data collected and sent from F-Secure demons when function disabled
• [WLAN] Wireless 5G guest1 enable button should be grayed out inside card page setting
• [Parental Control] When user add more than 12 parental control rules, GUI warning message should modify.
• [System] Uncheck Random Password but without set the Password, DUT should dump warning message and reject to set
• [WLAN] Wireless 5G guest1 can not enable from card page
• [MPro Mesh_Agent for Android] The APP after stay on Home page over 30 minutes, it will occurs crash
• [System] Suggest the first character for language change to capital letter.
• [eITS #211201635][VPN] pptp passthrough speed limit
• [MPro Mesh] The SSID of Guest cannot be set additional characters "~!@#$%^&", It will pop up warning message.
• [eITS #210601617] EMG3525-T50B_Parental control is disable after the device reboot

Modifications in V5.50(ABPM.7)b2

Base on V5.50(ABPM.7)b1 to release V5.50(ABPM.7)b2

[FEATURE ENHANCEMENT]

• [OPAL Generic][TR-069] WiFi 802.11 mode parameter change.
• [OPAL] support new FW version format for spin release.
• [eITS 210900906] Disable DHCP server if all of the binding WAN are bridge.
• [OPAL Generic] Rom-covert behavior for Mesh FW.
• Upgrade OPENSSL to 1.1.1b.
• [eITS 210401010][OPAL Generic] enabling guest-network via gui.

[BUG FIX]

• [eITS 211001522][VoIP] Call Hold does not work.
• [eITS 211001230] Automatically enable TR-69 when ACS URL received via DHCP Option43.
• [eITS 210500325] L2TP logging.
• [eITS 210500323] L2TP client should start automatically after CPE boots and maintain the connection.
• [eITS 211200990] Disabling EasyMesh will enables OneSSID.
• [MESH] Upgrade from non-support Mesh FW to Mesh supported FW, behavior is wrong.
• [TR-069] The Name of Trusted CA is not complete if CPE download CA via TR-069.
• [TR-069] The default value of "InternetGatewayDevice.X_ZYXEL_LifeMoteAgent.State" is "RUNNING"
• [GUI] The information of the new Bridge WAN show incorrectly in system info page.
• [GUI] DUT blocks port forwarding rules with different originating IP
• [L2TP] Modifiy the L2TP rule once, will disconnect from the L2TP server, but if modified 3~4 times. CPE will crash
• [eITS 211100068] Wrong sequence of vlan auto hunt
• [eITS 211100551] Pause Internet Feature in MPro
• [MPro Mesh_Android] For Generic FW, all agent signal LED should remove Amber signal at APP Home page agent
• [MPro Mesh_Agent] After disable all extender, its will stay in Home page over 3 minutes online status then change to No connection status
• [MPro Mesh_Agent] When disable end devices the Pause Internet does not work
• [TR-143] VDSL 35B TR143 download rate is over than link rate.
• [MPro Mesh] AP roaming, "SteeringStatus" stays at "IN_STEERING", controller will not manage this mobile phone.
• [MPro Mesh] Band Steering, "SteeringStatus" stays at "IN_STEERING".
• [MPro Mesh] Press Controller SW WPS PBC & Extender SW Onboarding button to Add Device Extender-Repeater to Controller successfully but Extender does not pop up "WPS pairing completes" message
• [Stress] ZyPark-WLAN Stress test over 72 hours occurs memory leakage and has lots of same process.
• [GUI] Wireless 5G guest1 can not enable from card page
• [WAN] Enable DHCP option 120 of IPoE WAN, but there' no option120 in DHCP packets.
• [WLAN] Defualt 2.4G wireless 802.11 mode display null value.
• [WAN] According to the capability of the USB dongle or the current link status, the WWAN icon can display "4G".
• [WAN] Default DSL modulation is wrong
• [MPro Mesh] Plug-off Ethernet cable between Controller & AP_Agent then AP_Agent will change to RP_Agent, but it still display in Wired category on Controller Connectivity page.
• [eITS 211200010] Apple sync not working

Modifications in V5.50(ABPM.7)b1

Base on V5.50(ABPM.6)b7 to release V5.50(ABPM.7)b1

[FEATURE ENHANCEMENT]

• [OPAL Generic] Media Server GUI Change
• [eits #210200785] PCP (Port Control Protocol) support
• [eits #200301509] Increase Parental Control Profile entries
• [eits #210401527] Configure available cards in web-gui
• [eits #210200123] Feature FDPS at our VDSL2 devices should be enabled by default

[BUG FIX]

• [eits #210601879] ACS Server communication not works with specific configuration
• [eits #210700890] Static DHCP IP address bug
• [eits #210601604] Static DHCP IP address bug
• [eits #210601861] router lifetime invalidated for a short while on DHCPv6-renew
• [eits #210600461] disable or optimize client check
• [eits #210801029] DNSv6 of WAN cannot get IP
• [eits #210800919] cannot set static DNSv6 IP via TR098
• [eits #210601930] DS-Lite setting missing Automatically configured by DHCPC
• [eits #210900169] Multicast messages not sent to STB
• [eits #210601911] Use under Language correct coutry names
• [eits #210700601] System Info German language Schnittstellenbetriebszeit
• [eits #210400299] Support 4G Compatibility of Dongles DLINK-DWM-222 A2
• [eits #210901346] The TR69 X_ZYXEL_Wireless_Mode for 5Ghz Band AX Mixed mode acceptable value is not consistent
• [GUI] WiFi password cannot input spaces on Card page

Modifications in V5.50(ABPM.6)C0

Base on V5.50(ABPM.6)b9 to release V5.50(ABPM.6)C0

Modifications in V5.50(ABPM.6)b9

Base on V5.50(ABPM.6)b8 to release V5.50(ABPM.6)b9

[BUG FIX]

• Warning when deactivating EasyMesh

Modifications in V5.50(ABPM.6)b8

Base on V5.50(ABPM.6)b7 to release V5.50(ABPM.6)b8

[FEATURE ENHANCEMENT]

• [eits #210801059] Warning when deactivating EasyMesh

[BUG FIX]

• [MPro Mesh] Sometimes Extender_RP cannot connect back Controller backhaul after Reboot Controller or Controller do fw upgrade or Controller do backup then restore config setting. (Rate: 3/10)
• [MPro Mesh] After disable/ enable Controller 5G, sometimes one or two extender_RP cannot connect back Controller WiFi_Backhaul. (Rate: 2/5)
• [MPro Mesh] Sometimes Extender_RP cannot connect back Controller backhaul after Modify wifi setting. (Rate: 1/5)
• [MPro Mesh_Agent] The guest wifi of Extender transmit beacon when modify main wifi setting and the Guest wifi is disable.

Modifications in V5.50(ABPM.6)b7

Base on V5.50(ABPM.6)b6 to release V5.50(ABPM.6)b7

[FEATURE ENHANCEMENT]

• [eits #210400299] 4G Compatibility of Dongles for DLINK DWM-222 A2

[BUG FIX]

• [MPro Mesh] Set the last character of SSID to be blank, wifi beacon will send duplicate SSID
• [MPro Mesh] 2.4G/5G bouncing occurred in Band Steering.
• [MPro Mesh] The guest wifi of Extender transmit beacon when Extender onboarding to Controller successful and the Guest wifi is disable.
• [MPro Mesh] The SSID of Main and Guest cannot be set additional characters "~!@#$%^&", It will pop up warning message.
• [MPro Mesh] Add extender successful then Extender H/W WPS button again cause to Extender disconnect and cannot connect back to Controller
• [MPro Mesh_Agent] When disable Extender_AP agent over 5 minutes it still show in APP via online status

Modifications in V5.50(ABPM.6)b6

Base on V5.50(ABPM.6)b5 to release V5.50(ABPM.6)b6

[BUG FIX]

• [MPro Mesh] There is no steering record during the band steering test
• [MPro Mesh] After Extender_RP lose backhaul connection, Controller still display this extender in station list in zyslctl -a.
• [MPro Mesh] Plug-off Ethernet cable between Controller & AP_Agent then AP_Agent will change to RP_Agent, but it still display in Wired category on Controller Connectivity page.
• [MPro Mesh_Agent] When disable all extender/ clients the Status did not show "Disconnect", all devices will disappear by directly within 2 minutes
• [MPro Mesh] Upgrade fw from non_mesh fw to support mesh fw w/o reset default, it's onboarding failed.
• [MPro Mesh] Restore Non_Mesh fw backup config file to support Mesh fw controller, it's onboarding failed.
• [MPro Mesh] Sometimes Extender_RP cannot connect back Controller backhaul after Reboot Controller or Controller do fw upgrade or Controller do backup then restore config setting. (Rate: 3/10)
• [MPro Mesh] After disable/ enable Controller 5G, sometimes one or two extender_RP cannot connect back Controller WiFi_Backhaul. (Rate: 2/5)
• [MPro Mesh] Sometimes Extender_RP pwr LED will keep blinking when it lose backhaul connection. (2/10)
• [MPro Mesh] Candela stress test, wifi clients only 24 clients (2.4G*12 and 5G*12) to associated in withing 3 minutes
• [MPro Mesh_Agent] During do add extender process, it sometimes meet APP redirect to "No connection" page (1/10)
• [MPro Mesh_Agent] RP_Agent connection type is show wrong when modify SSID and Password

Modifications in V5.50(ABPM.6)b5

Base on V5.50(ABPM.6)b4 to release V5.50(ABPM.6)b5

[BUG FIX]

• Fix Mesh connection problem.
• [MPro Mesh] Onboarding 2nd RP_Agent, the 2nd RP_Agent will disappear/appear repeatedly on mesh topology and its pwr led keep green blinking.
• [MPro Mesh] 2.4G/5G bouncing occurred in Band Steering.
• [MPro Mesh] AP roaming, Controller steer wifi client to extender 2.4G

Modifications in V5.50(ABPM.6)b4

Base on V5.50(ABPM.6)b3 to release V5.50(ABPM.6)b4

[BUG FIX]

• [eits #210700395 ] no WAN-link with 5C1 and 4wire cable
• [eits #210601494] Random SIP accounts register failure
• [eits #210401093] Internet LED after succesfull Mesh pair does not light
• [MPro Mesh] No defined WPS LED on RP mode.
• [MPro Mesh] No defined uplink led behavior on RP mode.
• [WLAN] Enable Wi-Fi key reminder, LAN PC open a http/https website but CPE will not redirect to landing page
• [GUI] If WPS is Enabled, UPnP should automatically be turned on.
• [Stress] ACS stress testing download FW & change ACS URL, Console show call trace but FW still upgrade.
• [Security] Wireless SSID command injection.
• Both 2.4G and 5G SSID will disappear when wireless is idle

Modifications in V5.50(ABPM.6)b3

Base on V5.50(ABPM.6)b2 to release V5.50(ABPM.6)b3

[FEATURE ENHANCEMENT]

• [GUI] Multi-language GUI for OPAL generic GW + Extender

[BUG FIX]

• [eits #210500124] It should be possible to activate/deactivate EasyMesh
• [eits #210500468] EMG3525-T50B_SSID name 5G does not appear on the network
• [eits #210500469] EMG3525-T50B_MESH page is disabled, unable to change the settings
• [eits #210500416] EMG3525-T50B_Parental Control- Unable to select ENABLE button
• [eits #210500519] VMG3625-T50B - Parental Control Settings not working.
• [eits #210500523] VMG3625-T50B - Wireless SSIDs and WPS button
• [eits #210500478] VMG3625-T50B DSL Settings not included
• [eits #210400274, 210400275] [IOP] customers on 200Mbps FTTH service are only receiving 100Mbps
• [eits #210501117] IPV6 parameter errors
• [eits #210500126] Warning when user activates EasyMesh
• [eits #210500610] EMG3525-T50B - requires confirmation on DNSmasq version
• [eits #210300577] Quick start Wizard fails to complete when setting up EMG3525 using Wi-Fi (let customer use ABPM6b3 verify first)
• [eits #210300578] Quick start Wizard fails to complete when setting up EMG3525 using Wi-Fi
• [eits #210500606] EMG3525-T50B_Wireless disconnect, unable to finish QSW using wireless connection
• [ACTS] Change admin account user name by ACS server and then reboot, the CPE zhttpd daemon will restart continuously
• [VMG8623-T50B] [MPro Mesh] The network wifi sync setting with RP / AP mode will be unsuccessful
• [VMG8623-T50B] [MPro Mesh_Agent] After modify SSID and Password via APP, all extender did not sync with controller
• [WAN] Kill the PPPoE session on PPPoE server but CPE PPPoE stats still has uptime and DNS IP address.
• [System] [RomFile] Online Firmware Upgrade functions fail when reboot.
• [ZyPark Stress] The CPE should not happen kernel panic and call trace within 72 hr at ZyPark (nf_ct_delete_from_lists)
• [DST] The DST & GUI value should be corresponding
• [MESH] The VMG8623-T50B series model need to modify parental control GUI & TR-069 SPV mesh function if ECONET MT7615D & MT7915 design limit
• [MPro Mesh] Sometimes online extender disappear, wifi client "stale=Yes"
• [MPro Mesh_Agent] Reboot Extender does not work
• [MPro Mesh] After disable then enable Mesh function via TR-069, the zyMAPSteer daemon will disappear.
• [MPro Mesh_Agent] After modify SSID and Password via APP, all extender did not sync with controller
• [MPro Mesh_Agent] Extender_RP will be repeated disappeared in APP Home page
• [MPro Mesh] The network wifi sync setting with RP / AP mode will be unsuccessful
• [Vulnerability] DeAgg & DeFrag Attacks

Modifications in V5.50(ABPM.6)b2

Base on V5.50(ABPM.6)b1 to release V5.50(ABPM.6)b2

[BUG FIX]

• [TR-069] IGD.DeviceInfo.Description for EMG product is not suitable.
• [NAT] After reboot the DUT, the Address Mapping rule cannot work correctly
• [eITS #210200621] [GUI] captive portal breaks wan access.
• [Diagnostic] The diagnostic GUI should not pop-up warning message even user fill in correct FQDN format in TCP/IP address
• [USB] Can't add share folder for file sharing
• [MAC Filter] Use Drop-down menu to add MAC Filter rule, MAC Filter function cannot work.
• [WLAN] WiFi support WPA3 security mode, the default wifi security mode should be WPA3-SAE/WPA2-PSK
• [Security] L2TP VPN page should not be visible for generic FW by default.
• [#144126] [System] Language list include "French、Deutsch、 Espanol".
• [L2TP] L2TP VPN function should be work fine
• [WAN] The CPE GUI should not show programming syntax wording when user click Disconnect button via ADSL PPPoA mode
• [WAN] In PPPoA mode, the value of "WAN Received" and "WAN Sent" in Traffic Status page always display 0.
• [WAN] The layout of IPoA information is displayed incorrectly in System Info
• [WAN] When WAN is Bridge mode, the MAC Address should show N/A in System Info.
• [WAN] VLAN Autohunt function cannot work
• [LAN] Verify the IPv6 DNS 1/2/3 field should block the duplicate DNS value
• [WLAN] WLAN 2.4G Guest/More AP Max. Upstream Bandwidth & Max. Downstream Bandwidth did not work well.
• [WLAN] Beacon and DTIM interval can't save success.
• [VLAN Group] The VLAN Group page note should not show any GRE wording even VMG8623-T50B series model not support GRE function
• [LAN] Interface Grouping rule with option 125 is unable to be added.
• [Security] In login_privilege page should not show account password.
• [VoIP] Call block function should hide, it is for sunrise project.
• [QoS] Can not accept port range 99-100 when add a classification rule.
• [GUI] The Broadband table information had been shift.

Modifications in V5.50(ABPM.6)b1

Base on V5.50(ABPM.5)C0 to release V5.50(ABPM.6)b1

[FEATURE ENHANCEMENT]

• [eITS #200102401] Change default date be the creation or the FW release date instead of 1-1-1970.
• [eITS #200400636] Modify the web GUI display from "Annex M" to "Annex M/Annex J".
• [eITS #200400612] Support download & import CA from TR69 by using the FileType "6 ZYXEL SSL CA File".
• [eITS #200602984] Support disable/enable WiFi HW button function via TR-098 and TR-181.
• [eITS #200602846] Support log for the behavior when WiFi HW button is triggered and WiFi is enabled/disabled after the button is triggered.
• [eITS #200603672] Add warning message about disabling the Firewall.
• [eITS #200700034]Support to use MAC address or serial number as ACS password.
• [eITS #201001163]Support Lifemote agent v1.3.
• On MAC filter page, show the devices(drop-down list) which are connected to modem.
• [eITS #201201184]VLAN0 support for customer's network.
• Change time format 00:00-23:59 in Parental control page.
• [Generic] Key Feature - L2TP (default disabled)
• Support Zyxel MPro Mesh.
• Support Operation mode

[BUG FIX]

• [eITS #200500100] When send the FAX to peer, sip server will send the second INVITE the same SDP as the 200 OK of the previous INVITE which make CPE treat as invalid FAX request and cause the FAX fail.
• [Vulnerability] UPnP protocol can be abused to perform DDoS and/or data exfiltration via SUBSCRIBE capability.
• [eITS #200603738] Dropbear not running after reboot
• [GUI] GUI still exist DSL WAN Interface (nas0/nas8) on model EMG3525 Diagnostic 802.1ag and 802.3ah page.
• [eITS #200800711] [Vulnerability] CVE-2019-11358 vulnerability update jQuery to "3.5.1".
• [eITS #201101346] Firmware-download url does not follow routing path
• [#210100668] [Vulnerability] Vulnerabilities in Multiple Zyxel Equipment from Sec consult => issue 1,2,4,5,7,8,9,10
• [#210100667][Vulnerability] Dnsmasq multiple vulnerabilities (DNSPooq)
• [Vulnerability] [CVE-2020-1971][Openssl]Correctly compare EdiPartyName in GENERAL_NAME_CMP()

Modifications in V5.50(ABPM.5)C0

Base on V5.50(ABPM.5)b1 to release V5.50(ABPM.5)C0 FCS

Modifications in V5.50(ABPM.5)b1

Base on V5.50(ABPM.4)C0 to release V5.50(ABPM.5)b1

[BUG FIX]

• [#210100697][System] Supervisor password does not work from WAN side after upgrade.

Modifications in V5.50(ABPM.4)C0

Base on V5.50(ABPM.4)b5 to release V5.50(ABPM.4)C0 FCS

Modifications in V5.50(ABPM.4)b5

Base on V5.50(ABPM.4)b4 to release V5.50(ABPM.4)b5

[FEATURE ENHANCEMENT]

• [eits #200102401] Set default date as system uname time.

[BUG FIX]

Modifications in V5.50(ABPM.4)b4

Base on V5.50(ABPM.4)b3 to release V5.50(ABPM.4)b4

[BUG FIX]

• [Vulnerability] Unauthenticated Denial-of-Service effectively disabling the device's web-interface.
• [Vulnerability] Arbitrary remote code execution (RCE) on the device through an HTTP request.
• [GUI] Vulnerability issue via Export_Log
• [137816] [System] atck command can't work on bootloader command line mode
• [137533] [NAT] CPE hang and show "Invalid memory segment access" when add an address mapping rule with interface "Default" then reboot CPE

Modifications in V5.50(ABPM.4)b3

Base on V5.50(ABPM.4)b2 to release V5.50(ABPM.4)b3

[BUG FIX]

• [WAN] EMG3525-T50B should be got WAN IP on the 7th or 8th ETH Interface with VLAN
• [Security] WOL command injection
• [Stability] buffer overflow when upgrade FW

Modifications in V5.50(ABPM.4)b2

Base on V5.50(ABPM.4)b1 to release V5.50(ABPM.4)b2

[FEATURE ENHANCEMENT]

• [#200100672][VMG3625-T20A_WiFi Key Detect Mechanism
• [#190900425]Device.X_ZYXEL_LoginCfg.LogGp.i.Account.i.RemoteAccessPrivilege doesn't work
• [#191200328]SSID format with random numbers

[BUG FIX]

• [#200603822]VMG8623-T50B Incoming call fails due to '404 Not Found'

Modifications in V5.50(ABPM.4)b1

Base on V5.50(ABPM.3)b2_F0 to release V5.50(ABPM.4)b1

[BUG FIX]

• [#190900425] 'Device.X_ZYXEL_LoginCfg.LogGp.i.Account.i.RemoteAccessPrivilege' doesn't work
• [#190900457] The bridge client cannot run IGMP server if Con-current WAN use PPPoE + bridge
• [#200100462] Other modifications for Czech language which are not available in JSON file
• [#200100533] WAN interface with VLAN ID and default Gateway
• [#191200311] Config DHCP client option42 on non-default interfaces
• [#200103035] EMG3525-T50B_Incorrect model number
• [#200201333] Parental control in Turkish language display incorrect
• [#200201334] The Default of parental control in card page and advance page are not consistent
• [#200200810] fixed/hardcoded SSID to be broadcasted out before the wifi driver boot up
• [#200105375] SIP NAT Problem
• [#200300675] {Security Vulnerability] - Kr00k with BRCM/Cypress wifi chipset - Zyxel Uk
• [#200400142] DSL Advanced configuration apply unsuccessful
• [#200401166] Encapsulation Type - GUI option ADSL over ATM, VDSL over PTM
• [#200401236] VMG8825, PeriodicInformTime via CLI
• [#191100506] Option 61 Identifier unique for each device
• [#200100461] Updated JSON file with modifications for Czech language
• [#200106890] RFC 7599- Mapping of Address and Pomprt using Translation (MAP-T) and RFC 7597-Mapping of Address and Port with Encapsulation (MAP-E)
• [#200200772] RFC 7599- Mapping of Address and Pomprt using Translation (MAP-T) and RFC 7597-Mapping of Address and Port with Encapsulation (MAP-E)
• [#200300357] long boot up time : reduce boot up time
• [#191200210] OPAL Support Device.ManagementServer.InformParameter.{i}.
• [#191200262] OPAL Support user_startup_parameters.sh
• [#200300859] VMG8825, TR69 watchdog log

Modifications in V5.50(ABPM.3)b2_F0

Base on V5.50(ABPM.3)b2 to release V5.50(ABPM.3)b2_F0

[FEATURE ENHANCEMENT]

[BUG FIX]

• [#200300288] Laptop That Connect to Modem cannot access Internet

Modifications in V5.50(ABPM.3)b1_F0

Base on V5.50(ABPM.3)b1 to release V5.50(ABPM.3)b1_F0

[FEATURE ENHANCEMENT]

• [#200100672] VMG3625-T20A_WiFi Key Detect Mechanism add SN
• [#200200638] Unique ACS Username and Password
• [#191200328] Utilize mrd MAC to make Wifi default SSID random digits

[BUG FIX]

• [#200105375] SIP NAT rule fix
• [#200100533] WAN interface with VLAN ID and default Gateway
• [#200201141] Cannot save static IP in default gateway column

Modifications in V5.50(ABPM.2)C0

Base on V5.50(ABPM.2)b5 to release V5.50(ABPM.2)C0 FCS

Modifications in V5.50(ABPM.2)b5

[FEATURE ENHANCEMENT]

• [#119655][#191200326] Unique ACS Username and Password

Modifications in V5.50(ABPM.2)b4

[FEATURE ENHANCEMENT]

• [#119655][#191200326] Unique ACS Username and Password

[BUG FIX]

• [#119350] After "Perform download diagnostic" and "Perform upload diagnostic" test case, 'DiagnosticsState' still Requested status.

Modifications in V5.50(ABPM.2)b3

[FEATURE ENHANCEMENT]

• [#114453][#190900750] Listing processes on console might output pppd auth params
• [#114498][#190900794] Listing processes on console might output pppd auth params
• [#117174][#191100119] Language Settings : modify languages option
• [#115339][#191000125] EMG3525 Include GenXML utility in firmware
• [#115340][#191000127] EMG3525 Multiple Ethernet WAN-interfaces without VLAN-tag
• [#114675][#190801225] DHCP pool configuration replace with interface group

[BUG FIX]

• [#116658][#190500035] VMG8825 zcmd reach the maximum number of instant, will loop endless.
• [#106705][#190500612] DHCP option 43 enabled by default
• [#117469][#190800583] EMG3525-T50B_TR-069_UploadDiagnostics Fails

Modifications in V5.50(ABPM.2)b2

[FEATURE ENHANCEMENT]

• [#112113][#190800587] EMG3525-T50B_TR-069_TR143 DownloadDiagnostics inaccurate results
• [#113907][#190900326] EMG3525 IGMPv3 used even if IGMPv2 is configured
• [#115144][#190901023] FRQ VMG8825-B50B QoS / static route ro interface "drop"
• [#115808][#191000575] XML GPV InternetGatewayDevice.LANDevice.1.LANHostConfigManagement .IPInterface.1.X_ZYXEL_DHCPv6Server.IANAPrefixes
• [#116249][#191000920] VMG1312-T20B higher attenuation issue
• [#116662][#191001109] VMG3625-T20A can't import trusted CA
• [#112984][GUI] EMG5523-T50B should remove no interface name checkbox in VoIP `Bound interface Name` setting.
• [#115762][ACTS]Parental control warning message is strange word
• [#116208] Verify WLAN Schedule rule Time can be empty

[BUG FIX]

• [#112115][#190800588] EMG3525-T50B_TR-069_Total BytesSent and Total BytesReceived values remains on 0
• [#113056][#190801239] EMG3525 QR-code for SSID not correct in GUI
• [#114120][#190900534] EMG3525 Key-based authentication doesn't work
• [#111769][GUI] GUI description doesn't meet with latest OPAL ES
• [#112208][USB] GUI pops strange message when add over 130 chars folder name
• [#112763][Parental Control] The Network Service rule maximum records should be follow OPAL ES document.
• [#112850][LAN]LAN IPv6 Prefix Setup is Static will fail.
• [#112972][Security] The CRIME, TLS test result should show NOT vulnerable

Modifications in V5.50(ABPM.2)b1

[FEATURE ENHANCEMENT]

• [eITS #181200595]: Support phones hook-state (on-hook/off-hook) in the web VoIP Status page
• [eITS #190400092]: Support IGMP log on system log
• [eITS #190400662]: Support DHCPv6 option64 for IPv6 DS-Lite
• [eITS #190500612]: Enable DHCP option 43 by default
• [eITS #190500747]: Support Portuguese GUI.
• [eITS #190500597]: Support Turkey GUI.
• [eITS #190500025]: [GUI]Separate LAN/WLAN as different column in remote management page.
• [eITS #190700652]: Support Russian GUI
• Support Czech GUI

[BUG FIX]

• [eITS #190201272]: TR-181 has DSL-errors in Eth-WAN mode.
• [eITS #190600043]: Correct incorrect spelling on voip call history page.
• [eITS #190501104]: Some TR069 atm parameters will be returned on eth/vdal/wwan interfaces with GPN.
• [eITS #190600597]: Upload certificate error after changed gateway IP address
• [eITS #190700674]: DHCP with one address ip(Configure LAN subnet mask to 255.255.255.252) in the pool don't work

Modifications in V5.50(ABPM.0)D0

Base on V5.50(ABPM.0)C0 to release V5.50(ABPM.0)D0 for Annex B version.

Modifications in V5.50(ABPM.0)C0

Base on V5.50(ABPM.0)b7 to release V5.50(ABPM.0)C0

Modifications in V5.50(ABPM.0)b7_D0

Base on V5.50(ABPM.0)b7 to release V5.50(ABPM.0)b7_D0 for Annex B version.

Modifications in V5.50(ABPM.0)b7

[FEATURE ENHACEMENT]

[BUG FIX]

• [#107242] [WLAN] WPS LED didn't blink

Modifications in V5.50(ABPM.0)b6_D0

Base on V5.50(ABPM.0)b6 to release V5.50(ABPM.0)b6_D0 for Annex B version.

Modifications in V5.50(ABPM.0)b6

[FEATURE ENHACEMENT]

[BUG FIX]

• [#105357] [Wifi]PR HW WPS button cannot work.
• [#94713] [GUI] GUI should remove unsupported WAN type information.
• [#105192] [GUI] EMG5523-T50B/EMG3525-T50B should remove xDSL.
• [#106653] [LED] VMG3625-T50B Internet & WAN LED can't light on and Wi-Fi ON/OFF hardware button has no functional.
• [#106654] [LED] EMG3525-T50B Internet & WAN LED can't light on and Wi-Fi ON/OFF hardware button has no functional.
• [#95964] Console will hang up when DUT FW upgrade test via ACS
• [#106264] [Common Bug Fix][ECONET-7516] - switching between WAN and LAN during the restart

Modifications in V5.50(ABPM.0)b5_D0

Base on V5.50(ABPM.0)b5 to release V5.50(ABPM.0)b5_D0 for Annex B version.

Modifications in V5.50(ABPM.0)b5

[FEATURE ENHACEMENT]

[BUG FIX]

• [#105039][GUI] can't login via GUI with some of password.
• [#105036][DSL] EN7512/EN7516 G.INP US/DS ONLY preferred cannot get IP when physical layer link is up.
• [#103064][co-fw] EMG5523-T50B and EMG3525-T50B DSL hidden.
• [#95969][zcfg] DUT can't backup config file.
• [#95967] Model name isn't EMG5523-T50B.

Modifications in V5.50(ABPM.0)b4

[FEATURE ENHACEMENT]

[BUG FIX]

• [BUGFIX] Cannot get IP when DSLAM vectoring enable
• [BUGFIX] [EN7516][7.3.245.300] CVE-2017-11176 mqueue: fix a use-after-free in sys_mq_notify()

Modifications in V5.50(ABPM.0)b3

[FEATURE ENHACEMENT]

[BUG FIX]

• VMG8623-T50B EU power table

Modifications in V5.50(ABPM.0)b2_D0

Base on V5.50(ABPM.0)b2 to release V5.50(ABPM.0)b2_D0 Annex B version.

Modifications in V5.50(ABPM.0)b2

[FEATURE ENHACEMENT]

VMG8623-T50B/EMG3525-T50B/VMG3625-T50B/VMG5523-T50B co-FW and co-boot file

• GUI show/hidden based on the VD WAN or VoIP information, include VoIP, Broadband Advanced page. diag OAM and CFM page. XDSLStatistics page.
• "sys atsh" command show correct model name.
• Wan type option show / hidden support list.

Support Annex A and Annex B co fw version

• Use the different configuration to control it. Device.DSL.Line.{i}. X_ZYXEL_ADSL2_AnnexA_B

[BUG FIX]

Modifications in V5.50(ABPM.0)b1

First firmware release

[FEATURE ENHACEMENT]

[BUG FIX]

Known issues

Public Domain Software Announcements