Skip to main content

Version 5.4.1

Out-of-Band Management​

Advantech Edge BMC​

Added support for remote BIOS flashing via Advantech Edge BMC, providing a remote, secure, and stable BIOS update mechanism..

  1. Limited to specific models. Please contact us to get the latest support model list.
  2. Digital signature technology is employed to ensure the authenticity and integrity of the BIOS Image.
  3. During BIOS image deployment, data security is guaranteed through encrypted transmission channels and multiple layers of security verification.
BIOS Console Redirection

Security and Access Policies ​

  • Strengthened Authentication Security (CVE-2025-34256): Enhance the security of the EIRMMToken by fixing an issue related to the use of a hard-coded cryptographic key in the AuthUtil module, significantly increasing the robustness of authentication mechanism.
  • Enhanced Data Field Input Validation (CVE-2025-34257 through CVE-2025-34266): Input validation and data sanitization have been extensively improved across multiple API endpoints and device configuration fields. This update resolves numerous Stored Cross-Site Scripting (XSS) vulnerabilities, preventing attackers from permanently injecting malicious scripts into fields such as device names, schedule names, group descriptions, and various configuration menus.

Dependency Upgrades ​

  • Upgraded MongoDB from version 6.0.14 to 6.0.20, providing access to the latest features and bug fixes in the database management system.
  • Upgraded RabbitMQ from version 3.13.2 to 3.13.7, incorporating the latest improvements and security updates in the open-source message broker.

Third-Party Updates ​

  • OpenJRE, Eclipse Adoptium (v1.8.0422b06)
  • Tomcat (v9.0.100)
  • PostgreSQL (v14.17)
  • Grafana (v9.5.21)

Upgrade Version Path ​

Since MongoDB is the major database used by DeviceOn, we need to follow MongoDB's upgrade policy where users must successively upgrade between major releases. Since this version (v5.4.1) adopts MongoDB 6.0, if your current DeviceOn version is below 5.2.4, you need to first upgrade to version 5.2.4 which uses MongoDB 5.0 before upgrading to this version.