SMS Firmware Update for Vanderbilt VSRC/VRCNX Controllers (SMSv7.1.0)

RELEASE DATE: January 2022

Files Included with Full SMS Download

Improvements

VSCR-A & VRCNX-A

• Added Cybersecurity updates for:
  • OpenSSL
  • OpenSSH
  • LightTPD
  • SQLite
  • BusyBox
  • libxml2.
• Implemented Linux Kernel patches to remediate CVE-2018-25020, CVE-2021-4083, CVE-
  2021-20322, CVE-2021-45486, CVE-2022-23308, CVE-2022-28796, CVE-2022-30065,
  CVE-2022-30594 & CVE-2022-36946.
• Updated SQLite to remediate CVE-2022-35737.
• Implemented RFC 6056 compliant Transport-Protocol Port Randomization.
• Added support for RS2, Open Opens and Feenics OEM Codes for supported Mercury peripheral devices.
• Required the use of DCT v2 for configuration changes and required authentication. DCT v2 will be installed without removing any older version of the DCT which will still be required to manage controllers with older firmware.

VSRC-M & VRCNX-M

• Added Cybersecurity updates for:
  • OpenSSL
  • OpenSSH
  • LightTPD
  • SQLite
  • BusyBox
  • libxml2.
• Implemented Linux Kernel patches to remediate CVE-2021-4083, CVE-2021-20322, CVE- CVE-2022-23308, 2022-28796, CVE-2022-30065, CVE-2022-36879& CVE-2022-36946.
• Updated SQLite to remediate CVE-2022-35737.
• Added support for RS2, Open Opens and Feenics OEM Codes for supported Mercury peripheral devices.
• Required use of DCT v2 for configuration changes and required authentication. DCT v2 will be installed without removing any older version of the DCT which will still be required to manage controllers with older firmware.

Hot Fixes

VSRC-A & VRCNX-A

• Corrected issue where CIM IP address was not applied on first save in some circumstances.
• Corrected issue where optional controller heartbeat timer was not working correctly.

VSRC-M & VRCNX-M

• Corrected issue where CIM IP address was not applied on first save in some circumstances.