Firmware Update: Ubiquiti EdgeMAX EdgeRouter 2.0.9 Hotfix 4

Ubiquiti Networks has released a fourth hotfix for version 2.0.9 of the firmware for the EdgeMax EdgeRouter. The EdgeRouters are characterized by extensive setting options, but do require some network knowledge to get it running properly. Also, not all settings can be adjusted via the gui, so you have to go through the command line. The list of changes and improvements for this release is as follows:

Overview

The ER-X/ER-X-SFP/ER-10X/EP-R6 has more limited storage, and in some cases, an upgrade may fail due to not enough space. If this happens, remove the old backup image first (using delete system image CLI command, see here for more details) before doing an upgrade.

improvements

• Fixed CVE-2020-15078 in OpenVPN
• Fixed CVE-2022-0778 in openssl
• Fixed CVE-2018-25032 in zlib
• Fixed CVE-2020-27827 in lldpd
• Fixed CVE-2020-13848 and CVE-2021-28302 in libupnp
• Fixed command injection in WebUI
• UISP integration updated

known issues

• [DPI] – Sometimes DPI is reporting wrong rx/tx counters
• [Offloading] – L2TP IPSec traffic is not being offloaded on Mediatek-based routers (ER-X, ER-X-SFP, EP-R6)
• [Offloading] – VLAN traffic is not being offloaded on ER-12

Additional information

EdgeRouter firmware can be installed via CLI, WebGUI or UNMS. Detailed installation instruction is available here.

Download links

• ER-X, ER-10X, ER-X-SFP and EP-R6 | sha256sum
• ERLite-3 and ERPoe-5 | sha256sum
• ER-8, ERPro-8 and EP-R8 | sha256sum
• ER-4, ER-6P, ER-12 and ER-12P | sha256sum
• ER-8-XG | sha256sum