Ubiquiti EdgeRouter ER-X-SFP Router Firmware 1.10.11

Fixes:

- [PPPoE/L2TP/PPP] - Fix buffer overflow vulnerability in pppd daemon (CVE-2020-8597)
- [IPV6] - Allow packets with TTL=0 when "hwnat offloading" is enabled. This fixes DHCPv6 problems on ER-X/ER-X-SFP/EP-R6 models.
- [Offloading] - Fix bug when router randomly crashed after disabling offloading on ER-Lite, ER, ER-Pro, ER-Infinity, ER-4, ER-6P, ER-12.
- [WebGUI] - Regenerate WebGUI certificate if it does not meet new iOS 13 and MacOS 10.15 requirements.
- [IPSec] - Backport security fixes to strongswan v5.2.2 (CVE-2015-3991, CVE-2015-4171, CVE-2017-9022, CVE-2017-9023, CVE-2017-11185, CVE-2018-10811)
- [TechSupport] - Collect SLAB usage in support file
- [MDNS] - Fix bug when mdns service did not start with vti configured
- [Tcpdump] - Upgrade tcpdump v4.9.3 to fix RCE vulnerability (CVE-2018-14880)
- [SFP] - Fix bug when some SFP modules were mistakenly reporting TX error
- [SSH] - Limit permitted SSH MACs to those permitted by OpenSSH v7.4. Disabling some that are now considered weak and get flagged by vulnerability scanners as such.

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.