SMS Firmware Update for Vanderbilt VSRC/VRCNX Controllers (SMSv6.5.0)

RELEASE DATE: January 2021

Files Included with Full SMS Download: Coming Soon

CONTROLLER FIRMWARE VERSION
VSRC-A/VRCNX-A  V7.48A 
VSRC-M/VRCNX-M  V7.08M 
VSRC/VRCNX-R  V6.70V 
SRCNX  V6.58L 

Improvements

VSCR-A & VRCNX-A

  • Cybersecurity updates: OpenSSL, OpenSSH, LightTPD, SQLite and BusyBox
  • Disable Linux Core Dump to remediate CVE-2019-11599
  • Implement Linux Kernel patch to remediate CVE-2020-14314 & CVE-2020-14386
  • Implement check for dead coin cell battery on controller boot and adjust real time clock if battery dead and provide notification.
  • Implement Schlage AD/ENGAGE/LE lock IPB Privacy Mode.
  • Require change from Vanderbilt default password for controller configuration access.
  • Require complex password for controller configuration access on change.
  • Requires the use of DCT v2 for configuration changes and require authentication. DCT v2 will be installed without removing any older version of the DCT which will still be required to manage controllers with older firmware.

VSRC-M & VRCNX-M

  • Cybersecurity updates: OpenSSL, OpenSSH, LightTPD, SQLite and BusyBox
  • Disable Linux Core Dump to remediate CVE-2019-11599
  • Implement Linux Kernel patch to remediate CVE-2020-14314 & CVE-2020-14386
  • Implement check for dead coin cell battery on controller boot and adjust real time clock if battery dead and provide notification.
  • Implement Schlage AD/ENGAGE/LE lock IPB Privacy Mode.
  • Require change from Vanderbilt default password for controller configuration access.
  • Require complex password for controller configuration access on change.
  • Implement encrypted communications to Discovery and Configuration Tool (DCT) v2.
  • Require use of DCT v2 for configuration changes and require authentication. DCT v2 will be installed without removing any older version of the DCT which will still be required to manage controllers with older firmware.plement encrypted communications to Discovery and Configuration Tool (DCT) v2.

Hot Fixes

VSRC-A & VRCNX-A

  • Extend timeout updating VRI-1S3, VRI-2S3, VI-16INS3 and VI-16OS3 device firmware to eliminate occasional failure to update.

VSRC-M & VRCNX-M

  • Extend timeout updating VRI-1S3, VRI-2S3, VI-16INS3 and VI-16OS3 device firmware to eliminate occasional failure to update.

Full Release: FWv6.5.0