Technology News
myREX24 V2 - Security-Update! Auto-Update for the Portal & REX-Router
Potential vulnerabilities were discovered in the synchronization service (CTM for short), which transfers the router configuration from the myREX24 V2 portal to the routers. The service was remodeled and implemented on the portal and the REX routers.
We take potential vulnerabilities very seriously and are extending improvements across our entire product portfolio. This requires updating devices and portal solutions, but may also lead to restrictions for legacy devices.
TIMELINE
The CTM update is available as new firmware for compatible products.
From 23.09.2024:
On this date, the final patch will be rolled out to the V2 portals.
All compatible devices that have not yet been updated by this time will then be automatically updated with the CTM update firmware via the portal.
You as a customer do not need to take any action. All compatible devices newly connected after the portal update will be taken into account. The device update process is started with a time delay, so the automatic update of your devices may only be carried out at a later point in time after the portal update.
- Portals/Server/.virtual Firmware 2.16.3
- REX200 / 250 from HW:02 Firmware 8.3.x
- REX100 from HW:01 Firmware 2.3.x
For further details, processes, and FAQs, please refer to the document “CTM Update of the myREX24 V2 Remote Maintenance Solution”.
Download document
Further information on the security vulnerability can also be found here (CERT@VDE Advisories):
For REX100
and
for REX200/250.