EdgePower 1.14.0 includes the below bugfixes and improvements.

Improvements

• Updated Local Web Interface with various fixes and improvements.
• Added System Log configuration into Local Web Interface.
• Upgraded the SSH server.
• Added support for IPv6 in NTP client.
• Added support for IPv6 in remote syslog.
• Added support for IPv6 in SNMP server.
• [EP-54V-150W] Reduced CPU usage.
• [EP-54V-150W] Improved overload status detection.

Bugfixes

• Security fixes and improvements (CVE-2025-47203).
• Disabled weak SHA1 HTTPS ciphers.
• [EP-54V-150W] Fixed issue when IPv6 address was not set properly when disabling the management VLAN.
• [EP-24V-72W/54V-72W] Fixed issue when PoE does not work if low voltage monitor is disabled.

Known issues

This version is not compatible with password generator used in UISP Application older than 2.4.126.

Additional information

• SSH is disabled in the factory default config.
• Upgrading the firmware will not cause an interruption for powered devices. Output power will remain on.

EdgePower 1.13.0 includes the below bugfixes and improvements.

Improvements

• Upgraded the SSH server.

Bugfixes

• Various Local Web Interface fixes.
• Security fixes and improvements (CVE-2022-30065).
• [EP-54V-150W] Fixed Local Web Interface incorrectly showing disconnected PSU2.

Known issues

This version is not compatible with password generator used in UISP Application older than 2.4.126.

Additional information

• SSH is disabled in the factory default config.
• Upgrading the firmware will not cause an interruption for powered devices. Output power will remain on.

EdgePower 1.12.0 includes the below bugfixes and improvements and fixes potential security vulnerabilities.

Improvements

• Updated Local Web Interface with various fixes and improvements.
• Improved damaged battery recognition.
• Added possibility to change username.
• Updated Web Server SSL cipher list.
• A strong password is now required for newly created passwords.
• Updated UISP Application connector.

Bugfixes

• Upgraded the SSH server to resolve reported CVEs (CVE-2021-36369, CVE-2023-48795).
• Fixed bug when disabled DC output state may be flapping in UI.
• [EP-54V-150W] Fixed a bug where the temperature alert was triggered on a bad sensor reading.
• [EP-54V-150W] Changed temperature alert trigger to 90°C.

Known issues

This version is not compatible with password generator used in UISP Application older than 2.4.126.

Additional information

• SSH is now disabled in the factory default config.
• Upgrading the firmware will not cause an interruption for powered devices. Output power will remain on.

EdgeMAX EdgePower 1.11.1 includes the bugfixes listed below.

Bugfixes

• [EP-24V-72W/54V-72W] Fixed bug when Ethernet port auto MDI-X negotiation was not working properly.
• [EP-54V-150W] Fixed an issue when temperature alerts were shown incorrectly.
• Fixed memory leak in SNMP daemon.

Additional information

• Upgrading the firmware will not cause an interruption for powered devices. Output power will remain on.

Firmware upgrade for EdgePower 24V-72W / EdgePower 54V-72W

This firmware release includes a new feature - event notifications. UISP Application and UISP mobile app now shows event for example when the power backup from battery is used. Supported by UISP Application 2.1.38 or higher (will be released soon).

Improvements

• Added support for events notifications.
• Improved battery charging error detection.
• Static DNS servers are now prioritized.
• Disable the battery charger if overloaded. If the power load raises above 57W, charging is disabled to prevent a power supply overload. When the load drops below 57W, the charger is enabled again.
• Do not reconnect DC output after battery Low Voltage issue until AC is connected back.
• Support for DNS servers in SLAAC.
• Improved UISP Application support.

Firmware upgrade for EdgePower EdgePower 54V-150W

This firmware release includes a new feature - event notifications. UISP Application and UISP mobile app now shows event for example when the power backup from battery is used. Supported by UISP Application 2.1.38 or higher (will be released soon).

Improvements

• Added support for events notifications.
• Static DNS servers are now prioritized.
• Disable the battery charger if overloaded.
• Do not reconnect DC output after battery Low Voltage issue until second PSU is connected back.
• Support for DNS servers in SLAAC.
• Improved UISP Application support.

• Improved calibration process.
• Power outage data are now used for battery calibration.
• Filter interfaces in SNMP.
• Improved support file.
• Added ability to turn-off DC output.
• Improved UISP support.

Bugfixes

• Fixed bug when DC output may be temporarily lost when AC is disconnected/reconnected.
• Fixed bug when new battery may be detected as bad in some cases.
• Security fixes and improvements.

• Filter interfaces in SNMP.
• Improved support file.
• Improved UISP support.

Bugfixes

• Doesn't disconnect charging when low voltage is detected.
• PSU priority settings doesn't work after factory reset.

• improved faulty battery detection
• improved battery capacity detection 
• NTP client is now enabled by default
• improved deep calibration precision
• changed limits for battery capacity warnings (limits are now lower)
• changed calibration periods, calibration every 3 weeks, deep every 5th calibration
• battery Voltage is now used to estimate battery capacity when the charger is disabled

Bugfixes

• fixed bug when remaining time calculation may be wrong for some batteries
• fixed bug when Remote syslog settings doesn't work after factory reset 
• fixed incorrect timezone in UI after factory reset
• fixed AC detection on faulty devices
• fixed data types in SNMP response
• fixed false battery unplug detection when AC is lost (in some situations)

• NTP client is now enabled by default
• optimized power consumption during AC outage

Bugfixes

• fixed bug when Remote syslog settings don't work after factory reset 
• fixed incorrect timezone in UI after factory reset
• fixed bug when battery info is not reported if battery was disconnected for a while
• fixed wrong battery detection if charger is enabled
• fixed data types in SNMP response

• various fixes/improvements for UNMS

Bugfixes

• fixed bug when WebUI was not reachable on IPv6
• fixed memory leak when DNS server is unreachable

• changed algorithm for fast calibration, calibration process is extended to 2-weaks period now (Note that calibration data will be reset during upgrade)
• improved charging process on big batteries
• improved adjusting measured capacity according to discharge current

Bugfixes

• fixed bug when WebUI was not reachable on IPv6
• fixed memory leak when DNS server is unreachable
• various fixes/improvements for UNMS

Updated: Nov 17, 2020

First Published: Nov 17, 2020

Version: 1.0

Revision: 1.0

Summary

A security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing CSRF protections, an attacker would have been able to perform unauthorized remote code execution.

This vulnerability was fixed in EdgePower firmware v1.8.0 and newer.

Affected Products:

EdgePower 24V/54V

Mitigation:

Update EdgePower 24V/54V firmware to v1.8.0 or newer version.

Impact:

CVSS v3.0 Severity and Metrics:

Base Score: 8.8 High

Vector: 

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Reference Links:

https://community.ui.com/releases/EdgeMAX-EdgePower-54V-150W-firmware-1-8-0/bb26f1a9-c61d-498b-9199-f4676a7115b5

https://community.ui.com/releases/EdgeMAX-EdgePower-24V-72W-54V-72W-firmware-1-8-0/72a1ab39-dba2-4c15-ba46-328b0126a6c9

https://www.ui.com/download/?q=epx

Introducing new WebUI

Improvements

• improved ping watchdog: allows set watchdog timeout from 1 minute to 1 hour

• Introducing new WebUI with Battery status graph: Graph shows battery charge in last 24 hours, outages, charging and calibrating process if occurs

Improvements

• improved ping watchdog: allows set watchdog timeout from 1 minute to 1 hour
• improved battery calibration process

Known issues

• Calibration process may show wrong battery capacity in some cases. Issue will be fixed in next release.

• Introduced new SNMP battery fields: PsuBatteryChargeLevel, PsuBatteryTimeRemining, PsuBatteryReplaceIndicator, PsuBatteryLastReplaceDate (for more information see attached SNMP Mib file)

Improvements

• Added detailed error message when automatic update check fails
• Optimized charging time for bad batteries

Bugfixes

• Fixed bug where WebUI stops working if port is changed to 81
• Updates and fixes for better use with UNMS

• Introduced new SNMP battery fields: PsuBatteryChargeLevel, PsuBatteryTimeRemining, PsuBatteryReplaceIndicator, PsuBatteryLastReplaceDate (for more information see attached SNMP Mib file)

Improvements

• Added detailed error message when automatic update check fails
• Optimized charging time for bad batteries

Bugfixes

• Fixed bug where WebUI stops working if port is changed to 81
• Updates and fixes for better use with UNMS

• added Locate function in System > Device Maintenance tab. Allows to locate device by blinking LED
• added warning when default password is used
• added support for reporting crashes. Option can be disabled in System > Device

Improvements

• updated self-signed HTTPS certificate generation rules to match macOS v10.15  and iOS v13 requirements

Bugfixes

• fixed bug when Reset battery status doesn't reset currently running/planned calibration
• fixed Total power consumption when in some cases was counted inaccurate
• fixed bug when User was immediately logged out when Web Server Session timeout field is set to 0
• fixed bug when default route was not set after reboot in some cases.
• various WebUI fixes
• various fixes/improvements for UNMS

• added Locate function in System > Device Maintenance tab. Allows to locate device by blinking LED
• added warning when default password is used
• added support for reporting crashes. Option can be disabled in System > Device

Improvements

• changed behavior of Charging - Adaptive fast Charging is now automatically enabled when battery capacity allows it
• updated self-signed HTTPS certificate generation rules to match macOS v10.15 and iOS v13 requirements

Bugfixes

• fixed "battery voltage low warning" which was shown even if battery is not connected
• fixed bug when Reset battery status doesn't reset currently running/planned calibration
• fixed Total power consumption when in some cases was counted inaccurate
• fixed bug when User was immediately logged out when Web Server Session timeout field is set to 0
• fixed bug when default route was not set after reboot in some cases
• various WebUI fixes
• various fixes/improvements for UNMS

• added automatic check of new firmware availability in UI
• added support for UNMS Mobile apps.

Improvements

• DC Out is now recovered from overloaded state when it was caused by a temporary outage of one PSU
• battery settings are now hidden when no DC PSU inserted

Bugfixes

• fixed bug when hosname in UNMS key wasn't sometimes resolved by DNS
• various fixes/improvements for UNMS