Software update: RouterOS 6.48.3

MikroTik has released version 6.48.3 of RouterOS, an operating system focused on running router tasks. Think of routing network traffic, of course, but also bandwidth management, a firewall, controlling wireless access points, a hotspot gateway and a VPN server. It can be done on the hardware from MikroTik if it does its job on x86 or virtual machines. A license required, which is included with the purchase of MikroTik hardware. The changelog for this release looks like this:

What’s new in 6.48.3:

  • wireless – fixed all affecting ‘FragAttacks’ vulnerabilities (CVE-2020-24587, CVE-2020-24588, CVE-2020-26144, CVE-2020-26146, CVE-2020-26147);
  • branding – added option to upload custom files (newly generated branding package required);
  • console – do not clear environment values ​​if any global variable is set;
  • crs3xx – fixed Ethernet LEDs after reboot for CRS354 devices;
  • crs3xx – fixed VLAN priority removal for CRS309, CRS312, CRS326-24S + 2Q + and CRS354 devices;
  • crs3xx – fixed port-isolation on bonding interfaces for CRS317, CRS309, CRS312, CRS326-24S + 2Q + and CRS354 devices;
  • crs3xx – improved LACP linking between CRS3xx series switches;
  • crs3xx – improved system stability when receiving large frames on CPU for CRS317, CRS309, CRS312, CRS326-24S + 2Q + and CRS354 devices;
  • defconf – fixed default configuration loading on RBOmniTikPG-5HacD;
  • dot1x – fixed “reject-vlan-id” for MAC authentication (introduced in v6.48);
  • dot1x – fixed MAC authentication fallback (introduced in v6.48);
  • ipsec – fixed SA address parameter exporting;
  • lte – fixed “earfcn” to band translation for “cell-monitor”;
  • package – added new “iot” package with Bluetooth (KNOT only) and MQTT publisher support;
  • rb4011 – fixed SFP + port MTU setting after link state change;
  • rb4011 – improved SFP + port stability after boot-up;
  • route – improved stability when connected route is modified;
  • sfp – improved cable length monitoring as defined per SFF-8472 and SFF-8636;
  • ssh – return proper error code from executed command;
  • system – improved resource allocation (improves several service stability eg HTTPS, PPPoE, VPN);
  • tile – fixed bridge performance degradation (introduced in v6.47);
  • webfig – fixed “PortMapping” button (introduced in v6.48.2);
  • winbox – fixed health reporting on RB960, hEX and hEX S devices;
  • winbox – show “System / Health” only on boards that have health monitoring;
  • wireless – fixed issue with multicast traffic delivery to client devices using power-save;
  • wireless – improved iOS compatibility with HotSpot 2.0 networks;
  • www – added “X-Frame-Options” header information to disallow website embedding in other pages;

Version number 6.48.3
Release status Final
Website MikroTik
License type Paid