Potential vulnerabilities were discovered in the synchronization service (CTM for short), which transfers the router configuration from the myREX24 V2 portal to the routers. The service was remodeled and implemented on the portal and the REX routers.
We take potential vulnerabilities very seriously and are extending the improvements across our entire product portfolio, which requires updating devices and the portal solutions, but also leads to restrictions on old devices.
TIMELINE
The CTM update is available as new firmware for compatible products.
From the 23.09.2024:
On this date, the patch will be rolled out worldwide on all Public V2 portals. All compatible devices are then automatically updated with the CTM update firmware via the portal. You as a customer don't have to do anything; all compatible devices newly connected after the portal update will be taken into account. The device update process is started at a different time so that the automatic update of your devices could only be carried out at a later point in time after the portal update.
- Portale/Server/.virtual Firmware 2.16.3
- REX200 / 250 ab HW:02 Firmware 8.3.x
- REX100 ab HW:01 Firmware 2.3.0
For further details, procedures and FAQs, please refer to the document “CTM update of the myREX24 V2 remote maintenance solution”.
Download document