NETGEAR GSM4328PA Switch Firmware 12.0.17.6

Enhancements:

- Added support for salted hash to store password.
- The default minimum community string length for SNMPv3 is 8 chars.
- As per Mozilla's recommendation, only secure TLS1.2 ciphers are supported.
- Upgraded jQuery library to version 3.6.0.
- SNMPv3 message encryption uses AES128.
- SNMPv3 message authentication uses SHA-512.
- Upgraded OpenSSL library to the 1.1.11 version.
- Enhanced the brute-force attack protection.

Security Fixes:

- Fixes security vulnerabilities.

Bug Fixes:

- When the user enters the password, the clear text display of the password is removed.
- Addressed HTTP header sanity check
- Removed insecure hashing methods such as MD5.
- Users cannot connect to all the ports of a switch using OpenFlow.
- Failed to add IPv6 route in the hardware.
- There is a temporary loop when the switch is rebooted in a stack environment.
- Member switch doesn’t come online if SFP+ modules are used in a LAG in a stack environment.

Known Issues:

- For user passwords, line passwords and enable passwords, automatic configuration migration is supported to a more secure SHA512 in 12.0.17.6 or later releases if the passwords are encrypted in AES in 12.0.15.7 or prior releases.
- User, line and enable passwords are encrypted with MD5 (salted) in 12.0.15.7 or prior releases, they won’t be migrated into 12.0.17.6 or later releases, so you must reconfigure them.
- SNMPv3 MD5 and SHA-based passwords from 12.0.15.7 or prior releases won’t be migrated into 12.0.17.6 or later releases, so you must reconfigure them.
- A new UI page added in the previous 12.0.11.x release under Routing > Multicast > Mroute Static-Multicast Configuration doesn’t display automatically after upgrading the switch firmware from 12.0.9.x to 12.0.11.x or later releases.
- Workaround: Clear the browser cache to view this newly added page.

About Switch Firmware:

Given the large variety of models and different methods for upgrading the switch, if you wish to apply this package, we recommend that you read and understand the installation steps before you install a new firmware, even if you are a power user.

Usually the update procedure isn't much of a hassle as manufacturers try to make it as simple as possible; however, there are cases that are exceptions to this rule. First off, go to the system information page of the switch to check that the currently installed version isn't either newer or matching this release.

Applying a new firmware can decrease the security vulnerabilities, enhance overall performance and compatibility, improve various power management functions, resolve different errors, and add support for newly developed technologies and protocols.

It is recommended that you perform this step in a steady power environment such as the one ensured by a UPS unit, and that you don't interrupt the upgrade in any way, because this might cause the switch to malfunction.

That being said, click the download button, get and apply the new version, and check back with our website constantly to stay up to speed with the latest releases.

  It is highly recommended to always use the most recent driver version available.

Try to set a system restore point before installing a device driver. This will help if you installed an incorrect or mismatched driver. Problems can arise when your hardware device is too old or not supported any longer.