----------------------- | -- COSY+ Devices -- | ----------------------- Version 23.1s3 -- 2026/10/16 ---------------------- CHANGED: Web interface session timeout is now enabled by default for inactive sessions. The timeout behavior can be configured using the SYS parameters LogoutOnIdle and SessionCookieTTL. (FWCPU4-690) FIXED: LogoutOnIdle config parameter export from COMcfg.txt to config.txt (FWCPU4-734) FIXED: Fixed a path traversal vulnerability in SYS Config. (FWCPU4-743) FIXED: Improved modem recovery with hardware reset and device reboot fallbacks (FWCPU4-738) FIXED: Improved modem disconnection handling and connection recovery. (FWCPU4-733) FIXED: Improved VPN certificate regeneration behavior to avoid regeneration on every VPN connection (Talk2m blacklist improvement). (FWCPU4-730) Version 23.1s3PR -- 2026/03/10 ---------------------- CHANGED: Session timeout added in the web interface when there is no activity. The SYS parameter 'LogoutOnIdle' must be enabled and the timeout is configurable using 'SessionCookieTTL' (FWCPU4-661) FIXED: Ewon Cosy+ Wifi stops routing between IP interfaces when Internet connection drops. (FWCPU4-656) FIXED: Resolved 'pla System exec error (1)' entries occurring during TCM log export. (FWCPU4-618) FIXED: TCP dump command sanitized (FWCPU4-689) Version 23.0s4 -- 2026/05/15 ---------------------- FIXED: Out of bound reading during cookie checking corrected. Addresses remaining gaps in the previous fix (FWCPU3-438). (FWCPU4-692). Version 23.0s3 -- 2026/03/10 ---------------------- FIXED: Buffer overflow with the basic authorization corrected (FWCPU3-440) FIXED: Out of bound reading during cookie checking corrected (FWCPU3-438) FIXED: TCP dump command sanitized (FWCPU3-439) FIXED: Fixing buffer overflow in UTF-8 to ISO-8859-1 conversion (FWCPU4-670 & FWCPU4-680) Version 23.0s1 -- 2025/07/30 ---------------------- -- Major FIXED: COM parameters WanItfProt, FwrdToWan, NTPRelay and the SYS parameter USBIpEnable were reset after update (FWCPU4-650)(FWCPU4-648) FIXED: Added new COM parameter "ModemMtu" to resolve the Internet Connection Sharing issue using Cosy+ 4G EU version (FWCPU4-366) -- Standard ADDED: Add missing translations (FWCPU4-637)(FWCPU4-573) FIXED: Set originator field for translation for some events log (FWCPU4-644) FIXED: Fixed duplicate error codes (FWCPU4-636) Version 23.0s0 -- 2025/07/03 - RED Compliancy firmware (Deprecated and Replaced by 23.0s1) ---------------------- -- Major -- RED Compliancy modifications CHANGED: FTP server disabled by default (ClosedDevice=21 after Reset Level 2 or upgrade to 23.0)(FWCPU4-525) CHANGED: NTP server disabled by default (NTPRelayEnable=0 after Reset Level 2)(FWCPU4-526) CHANGED: USB/IP disabled by default (UsbIPEnable=0 after Reset Level 2) (FWCPU4-527) CHANGED: PROFINET explorer autorefresh disabled at page opening (FWCPU4-532) CHANGED: Allow SMTP protocol through the VPN interface only. CHANGED: No more use of HTTP protocol (port 80) for the Internet connection check. (FWCPU4-574) CHANGED: WAN Port is blocked by default (WANItfProt=3 after Reset Level 2) (FWCPU4-576) CHANGED: IP forwarding through WAN is blocked by default (FwrdToWAN=0 after Reset Level 2) (FWCPU4-576) CHANGED: Limit USBIP service to the VPN interface only. USBIP on WAN & LAN interfaces is blocked (FWCPU4-517, FWCPU4-587) CLEANUP: Remove DynDNS capability as now considered as insecure (FWCPU4-519) CLEANUP: Remove Modbus, Ethernet/IP, OPCUA, FINS, ISOTCP servers from firmware. ADDED: Allow users to disable HTTP & FTP ports by setting IpsHttpP1, IpsHttpP2 or IpsFtpP to 0 (FWCPU4-233) ADDED: Enhanced network protection enforced: a maximum of 10 connections allowed per IP address; ICMP (ping) rate limited to 1 per second. Both limits are logged in $dtTCM log file (FWCPU4-558) ADDED: Add event log for changed privacy parameters (FWCPU4-550) ADDED: Add event log when user password is changed (FWCPU4-579) ADDED: Add event log for denied access attempts (FWCPU4-581) ADDED: Add event log when user connects via web/ftp server (FWCPU4-579) ADDED: Add event log when configuration is modified (FWCPU4-578) ADDED: Add event log when user connects to FTP server (FWCPU4-622) ADDED: Add event log when reading EBDs and login is needed (FWCPU4-621) ADDED: Add event log when changing or using email/SMS for DI notifications (FWCPU4-591) ADDED: Implement thorough validation on the COM parameter VPNSecretKey to mitigate brute-force attacks (FWCPU4-571) ADDED: Implement a new persistent privacy asset log file to record privacy events. This log file can be accessed through the EBD $dtPAL (FWCPU4-631) FIXED: Minimize personal data in 4G or Wifi debug logs (APN, PSK, PIN code,...) (FWCPU4-552, FWCPU4-589) FIXED: Move critical Real time logs to Event logs to have them persistent (FWCPU4-553) FIXED: Remove email address from logs message that a DI notification is sent -- Standard FIXED: Remove invalid source in realtime logs (FWCPU4-561) FIXED: Prevent Log error pla System exec error (1) after each WAN connection (FWCPU4-617) FIXED: Issue when serial number incremental number (2501-xxxx-25) is above 4096 when using Ebuddy (FWCPU4-540) FIXED: Memory leaks in cfgcrypt.c (FWCPU4-592) FIXED: Too long error message causing crash of ewond (FWCPU4-571) FIXED: Add trigram "cfgw" of the configwriter unit UPDATE: Update translations (FWCPU4-573) UPDATE: Update parse-apn-list.py for APN repro update (FWCPU4-336) Version 22.1s6 -- 2026/03/10 ---------------------- FIXED: Buffer overflow with the basic authorization corrected (FWCPU3-440) FIXED: Out of bound reading during cookie checking corrected (FWCPU3-438) FIXED: TCP dump command sanitized (FWCPU3-439) Version 22.1s4 -- 2025/01/20 ---------------------- FIXED : Passwords with special characters could not be used anymore (Cherry pick of FWCPU3-158) Version 22.1s3 -- 2024/07/10 ----------------------- -- Security (See https://www.hms-networks.com/cyber-security) FIXED : Solution for vulnerability with improper input neutralization in FTP user name (FWCPU4-410) FIXED : Vulnerability with OpenVPN (FWCPU4-412) FIXED : Risk of password disclosure (FWCPU4-414) FIXED : Custom OpenVPN connection gets directly terminated (FWCPU4-422) FIXED : Improving cryptographic key for security (FWCPU4-426) FIXED : Upgrading Sencha ExtJS (FWCPU4-447) -- Standard FIXED : Stabilizing automatic downgrade (FWCPU4-437) FIXED : eproxy watchdog when using LAN to WAN rules and WAN connection is interrupted (FWCPU4-441) Version 22.1s0 -- 2024/03/18 ----------------------- Version 22.1s0 includes all changes of 22.0s0, 22.0s1, 22.1s0PR and the following updates : -- Major FIXED : Improvement when changing Talk2m VPN servers in case of local firewall restrictions (FWCPU4-377) FIXED : Reinforcement of the fix done in 21.2s8 for firmware installation failure in case of unstable internet connection during firmware update over the air (FWCPU4-345) UPDATE : Automatic Firmware update interval is now set to 22 hours and 5 minutes after the boot time to prevent collision with other daily internal events like the Modem disconnection (FWCPU4-369) -- Standard ADDED : Improve networking issues diagnostic through the event&realtime logs (FWCPU4-374) ADDED : Improved log message in case of Modem disconnection (FWCPU4-371) FIXED : Internet disconnection during automatic or manual firmware update might block the update process (FWCPU4-387) FIXED : Display clear error message if the Cosy+ cannot download its VPN certificates during the Talk2m wizard. (FWCPU4-313) FIXED : KPI/OPCUA Flag was set during Talk2m synchronization (FWCPU4-373) FIXED : Manual firmware update with no valid internet connection generated infinite amount of logs (FWCPU4-383) FIXED : Empty realtime log might be generated during manual firmware update (FWCPU4-397) Version 22.1s0PR -- 2024/01/02 ----------------------- NEW : Support of COSY+ 4G Japan (FWCPU4-267) FIXED : APN Helper Update for Canada & Germany (FWCPU4-329, FWCPU4-330) FIXED : Firmware installation failure in case of unstable internet connection during firmware update over the air (FWCPU4-345) 22.1s0PR also includes all updates of 22.0s0 & 22.0s1 Version 22.0s1 -- 2023/12/01 ----------------------- [PATCH FOR FWR 22.0 ONLY] FIXED : Profinet communication no longer going through the Ewon Cosy+ Ethernet Switch. [DEPRECATED] Version 22.0s0 -- 2023/10/10 ----------------------- (!! firmware downgrade from 22.x to an older version is not possible !!) -- Major NEW:Support of new Ethernet Switch hardware (FWCPU4-2/FWCPU4-207/FWCPU4-219/FWCPU4-218/FWCPU4-180) NEW:Responsive Mobile GUI (FWCPU4-8) NEW:VPN connection to 3rd party OpenVPN Servers (FWCPU4-9) NEW:Forbid downgrade to unsupported firmware version (FWCPU4-173) FIXED:Talk2m connectivity issue (Event log : "OpenVPN certificate validity expired") (FWCPU4-91)(FWCPU4-250) -- Standard NEW:Add DTCode ant DTModel (Cosy+ Hardwre version) field in the system info page (FWCPU4-221) NEW:New authentication sequence to prevent too many authentications with deactivated SIM cards for Cosy+ 4G (all models) (FWCPU4-7) FIXED:4G connection might not work when using username/password (FWCPU4-262) FIXED:4G connection establishment improvement (FWCPU4-34) FIXED:Talk2m wizard is continuously executed in case of failure when launched via USB/SD (FWCPU4-3) FIXED:FTP Passive DATA connection through NAT 1-1 is not working (FWCPU4-4) FIXED:WiFi information are still displayed in the UI even if the WiFi connection is down (FWCPU4-6) FIXED:User Connected indicators (DO on and T2M LED Flashing) are not stopped in case VPN is lost (FWCPU4-18) FIXED:WAN fallback using WiFi/4G as primary: VPN failed to connect after reboot (FWCPU4-26) (FWCPU4-76) FIXED:Modem issue "Signal quality is bad" when switching cellular technology (4G,3G) (FWCPU4-90) FIXED:Custom APN field for modem internet wizard was empty in some cases (FWCPU4-247) FIXED:WIFI & WAN LEDs are not turned ON when the Cosy+ Wifi connection is restored. (FWCPU4-103) FIXED:Ethernet frame with VLAN tag 10/20 sent through LAN/WAN are passing through the switch while other VLAN tagged Ethernet frames are dropped (FWCPU4-220) FIXED:LANWANSwitch value 0 is considered as 8 on u-boot (FWCPU4-226) FIXED:DHCP server filter option was not working FIXED:Firmware update through NTLM proxy (FWCPU4-12) FIXED:forceupdate file is now checked at upkg update (FWCPU4-209) FIXED:forceupdate file gets removed from USB stick/SD card after upgrading/downgrading the device (FWCPU4-272) FIXED:When disconnecting Ethernet WAN cable, RealTtime logs might be flooded with "Device API FSM State changed from AccountLinked to AccountLinked" (FWCPU4-5) FIXED:AutoUpdate to the same version ends with "Error" instead of a "Already up-to-date" message (FWCPU4-296) FIXED:GUI shows thumb down icon was shown instead of smiley when device was up to date (FWCPU4-194) FIXED:CORSAllowedHosts parameter crashes the device (FWCPU4-102) FIXED:T2M wizard succeeds with invalid activation key (FWCPU4-24) FIXED:Cosy+ does not come back to the previous configuration in case of Talk2M Wizard failure. (FWCPU4-20) FIXED:Internet wizard in combination with Modemmanager log level debug not reliable (FWCPU4-58) FIXED:Download ModemManager Log can lead to a Cosy+ Watchdog (FWCPU4-59) FIXED:Illegal utf8 input were accepted in the internet wizard (FWCPU4-92) FIXED:Possible overloading SIM card with non-readable SMS (e.g. UTF-16 chars) (FWCPU4-174) Version 21.2s10 -- 2024/07/10 ----------------------- -- Security (See https://www.hms-networks.com/cyber-security) FIXED : Solution for vulnerability with improper input neutralization in FTP user name (FWCPU4-411) FIXED : Vulnerability with OpenVPN (FWCPU4-413) FIXED : Risk of password disclosure (FWCPU4-415) FIXED : Improving cryptographic key for security (FWCPU4-427) FIXED : Upgrading Sencha ExtJS (FWCPU4-446) --Major FIXED : Reinforcement of the fix done in 21.2s8 for firmware installation failure in case of unstable internet connection during firmware update over the air (FWCPU4-443) UPDATE : Automatic Firmware update interval set to 22 hours and 5 minutes after the boot time to prevent collision with other daily internal events like the Modem disconnection (FWCPU4-419) -- Standard FIXED : Stabilizing automatic downgrade (FWCPU4-436) FIXED : eproxy watchdog when using LAN to WAN rules and WAN connection is interrupted (FWCPU4-442) Version 21.2s8 -- 2024/01/29 ----------------------- FIXED : Firmware installation failure in case of unstable internet connection during firmware update over the air (FWCPU4-345) Version 21.2s7 -- 2023/04/17 ----------------------- FIXED:Internet connection through HTTP proxy now uses the Server URL instead of the VPN Server IP address FIXED:Enabling firmware update through HTTP Proxy FIXED:Firmware update improvements (Error '58' or 'Operation not permitted') FIXED:Talk2M VPN connection/Wizard issue may occur when OpenVPN certificate validity expired or are missing. Version 21.2s4 -- 2023/02/21 ---------------------- [FIRMWARE ONLY FOR COSY+] FIXED:Fixing 4G connectivity issue in Japan Version 21.2s3 -- 2023/02/07 ---------------------- [FIRMWARE ONLY FOR COSY+] FIXED:Fixing some issues with 4G usernames and passwords. Version 21.2s2 -- 2023/01/26 ---------------------- [FIRMWARE ONLY FOR COSY+] FIXED:Fixing 4G connectivity issue on the device Version 21.2s1 -- 2022/12/19 ---------------------- [FIRMWARE ONLY FOR COSY+] FIXED:T2M Wizard was sometimes failing when the WAN interface was slow to connect. Version 21.2s0 -- 2022/12/16 ---------------------- [FIRMWARE ONLY FOR COSY+] ADDED:Support of WiFi Access Point for Cosy+ Wifi (Cannot be used together with Wifi Client mode) FIXED:T2M wizard was not working when using Internet HTTP proxy FIXED:Underscore was not considered as a special character in password policy FIXED [COSY+] 4G: Better IPv4 connection setup handling FIXED [COSY+] 4G: Enhancement in SIM unlock procedure in order to avoid unintentional SIM lock (Wrong PIN code now results to a deletion of the PIN code in the config) FIXED [COSY+] 4G: VPN connection was not recovered after a 4G re-connection FIXED:WAN Fallback was not working properly when DI1 was configured to control the WAN/VPN connection FIXED:Real Time Log might display negative clock values Version 21.1s1 -- 2022/10/26 ---------------------- [FIRMWARE ONLY FOR COSY+] --- From this firmware version, firmware management from eCatcher is possible. ---- --- Upgrade Cosy manually to FW 21.1s1 to enable Firmware Management through eCatcher. ---- ADDED:Support of Cosy+ WiFi ADDED:Support of Cosy+ 4G range (EU, NA, APAC). FIXED:T2M connection was not always recovered after an Internet connection issue. Version 21.0s1 -- 2022/06/23 ---------------------- [FIRMWARE ONLY FOR COSY+] FIXED:Security update Version 21.0s0 -- 2022/06/22 ---------------------- [FIRMWARE ONLY FOR COSY+] -- Major ADDED:The Firmware Update feature now allows selection of the update track ('Security patch only', 'Latest stable firmware' or 'Pre-release firmware') ADDED:USB Commissioning improvements. It is now possible to configure the password, time settings and GUI language with the USB commissioning (esetup.txt). -- Standard FIXED:SMS/Email subject is now prefixed by "(BOOT)" when DI1 or DI2 are ON at boot FIXED:Since firmware 20.0s1 the reset button was not taken any more into account. FIXED:Since firmware 20.0s1 the PLC Discovery feature was not working anymore. -- Continuity FIXED:System Wizard was no longer working when using specific password. FIXED:DHCPSLogLevel is now working as it should (0 = No logs, 1 = DHCP Server Logs displayed in the Realtime logs) FIXED:Global T2M stability improvements (T2M connection, led, wizard,...) Version 20.0s1 -- 2022/03/21 ---------------------- [FIRMWARE ONLY FOR COSY+] -- Major FIXED:Ewon could sometimes not recover its VPN connection after power cycle or Internet connection interruption Version 20.0s0 -- 2021/05/03 ---------------------- [FIRMWARE ONLY FOR COSY+] -- Major ADDED:Support of Cosy+ Ethernet ADDED:Default password must be changed at first login ADDED:Automatic software update ADDED:Online GUI on-demand update