Firmware NBE-7702-ALX

New Features:
N/A

Changes:
• An issue which provided a possibility to conduct a buffer overflow while operating SNMP has been fixed (CVE-2025-68615).
• An issue where the DNS address provided by the DHCP server was not being applied when DHCP was enabled has been fixed.
• Fixed an issue where vehicle color was not included in the ONVIF Profile M metadata stream for IVA Pro LPR.
• Fixed an issue where inaccurate and erratic trajectory data caused false wrong-way detection alerts in IVA Pro Traffic, particularly affecting truck detection and large vehicles.
• Fixed an issue where MQTT line-crossing events reported the initial object classification instead of the final corrected one, resulting in incorrect class reporting for VCA counting tasks.
• Improved live streaming stability with Genetec Security Center SaaS under low bandwidth conditions.
• Improved HTTPS handshake negotiation for faster initial connection establishment, reducing page load times and improving responsiveness when sending commands to the device.
• Fixed an issue where IVA Pro LPR with Webhook was not including the camera's Longitude, Latitude, and Camera Name in the event output.
• Fixed several issues in the recording engine related to retention time handling, recording mode fallback, and DST timezone offset block separation.
• Improved tone mapping and auto-exposure algorithms for better image quality and responsiveness under varying lighting conditions.

SHA256: D1BD9AEEFC5BF29FD556516FD67B39F0EE45C5D38C917A1B58D01BC38AD4CF99

New Features:
• Added a new command to extract snapshots from the device with selectable stream source “<camera.ip.address>/snap.jpg?JpegSourceEncoder=N”, where “N” specifies the target stream number to retrieve the snapshot

Changes:
• Fixed a high-severity CVSS Rating (7.5) vulnerability. The addressed fix safeguards the system to prevent unintended service interruption. This issue affected firmware version 9.80.0087 only and earlier firmware versions were not impacted.
• Fix improves the internal process managing Intelligent Video Analytics (IVA) of IVA Pro LPR, IVA Pro Appearance, IVA Pro PPE and IVA Direct-to-Cloud Verification for IVA Pro Visual Gun Detection, enabling automatic recovery from temporary service interruptions. Tests confirmed stable IVA recovery without user intervention, minimizing connection loss symptoms. Further enhancements for edge cases are planned for the next official firmware release.
• Resolved an issue where device recordings could become temporarily inaccessible through Genetec Security Center SaaS when specific combinations of frame rate and stream configuration settings were applied.
• Resolved an issue where camera onboarding to Genetec Security Center SaaS could be blocked by an error following a factory reset of a previously connected device.
• Improved the ONVIF search session handling to provide faster responses during forensic searches in third-party VMS platforms that support ONVIF.
• Resolved an issue where the device continued DHCPv4 discovery while configured for IPv6- only operation. IPv4 traffic is now fully disabled in IPv6 mode, preventing unnecessary DHCPv4 broadcast traffic and related network alerts. SLAAC operation in IPv6 mode has been corrected to ensure proper address assignment.
• Resolved an issue in IVA Pro LPR where the device could enter a crash loop over time when LPR Analysis was enabled and rules were configured, but the MQTT settings were not set.
• Resolved an issue where LPR Make and Model metadata retrieved via HTTPS could be incomplete or missing.
• Resolved an issue in IVA Pro LPR where importing license plate lists from CSV files containing more than 50 entries could fail with a “Failed to fetch” error. The import process has been corrected to reliably handle larger datasets.

SHA256: 3DC6277E45611DC7CD0CED0710EEF3929C15AC97951EB6830AF11F38FC07BE5F

New Features:
• Added a new command to extract snapshots from the device with selectable stream source “<camera.ip.address>/snap.jpg?JpegSourceEncoder=N”, where “N” specifies the target stream number to retrieve the snapshot

Changes:
• Fixed a high-severity CVSS Rating (7.5) vulnerability. The addressed fix safeguards the system to prevent unintended service interruption. This issue affected firmware version 9.80.0087 only and earlier firmware versions were not impacted.
• Fix improves the internal process managing Intelligent Video Analytics (IVA) of IVA Pro LPR, IVA Pro Appearance, IVA Pro PPE and IVA Direct-to-Cloud Verification for IVA Pro Visual Gun Detection, enabling automatic recovery from temporary service interruptions. Tests confirmed stable IVA recovery without user intervention, minimizing connection loss symptoms. Further enhancements for edge cases are planned for the next official firmware release.
• Resolved an issue where device recordings could become temporarily inaccessible through Genetec Security Center SaaS when specific combinations of frame rate and stream configuration settings were applied.
• Resolved an issue where camera onboarding to Genetec Security Center SaaS could be blocked by an error following a factory reset of a previously connected device.
• Improved the ONVIF search session handling to provide faster responses during forensic searches in third-party VMS platforms that support ONVIF.
• Resolved an issue where the device continued DHCPv4 discovery while configured for IPv6- only operation. IPv4 traffic is now fully disabled in IPv6 mode, preventing unnecessary DHCPv4 broadcast traffic and related network alerts. SLAAC operation in IPv6 mode has been corrected to ensure proper address assignment.
• Resolved an issue in IVA Pro LPR where the device could enter a crash loop over time when LPR Analysis was enabled and rules were configured, but the MQTT settings were not set.
• Resolved an issue where LPR Make and Model metadata retrieved via HTTPS could be incomplete or missing.
• Resolved an issue in IVA Pro LPR where importing license plate lists from CSV files containing more than 50 entries could fail with a “Failed to fetch” error. The import process has been corrected to reliably handle larger datasets.

SHA256: B75F09D503CF6F938E5458CC9E7EAE657E54A842D680D05F9B3D5D170FB447B5

New Features:
• Support of DINION 3100i IR and FLEXIDOME indoor/micro/outdoor 3100i models.
• Support of DINION 7100i IR with 8MP and telescopic lens.
• Default settings have been changed for the RCP+, HTTP and RTSP ports. These will become effective with new cameras and by factory-defaulting a camera but will not be affected by upgrading firmware to avoid functional interrupts of existing installations. For detailed information on “Security by Default” please refer to our tech note at https://www.boschsecurity.com/xc/en/solutions/video-systems/data-security/#downloads
• Support of Privacy Mode without requiring a license. The demo license keys mentioned with firmware 9.00 are deprecated. Settings from the demo mode will be inherited.
• Blurring pattern masks (pixelization) can be applied to static privacy masks to allow IVA to detect objects behind the masks while safeguarding the privacy of the region. To set this pattern, check the privacy masks tabs on the Web-GUI.
• Privacy mode can be enabled, acting as a dynamic privacy mask that blurs objects detected by the camera, such as people and cars. This should be activated through the encoding and installer menu on the Web-GUI. The feature is not available for FLEXIDOME indoor/micro/outdoor 3100i, FLEXIDOME multi 7000i and FLEXIDOME multi 7000i IR.
• The Bosch font used for on-screen display (video stamping) has been exchanged to support a wider range of languages, including Hebrew as well as Arabic and Asian languages. Some of these fonts require right-to-left support, which is now also supported.
• Improved motion streaming has been implemented to provide better image quality with lower noise and motion artifacts, thus allowing an even further reduced bitrate.
• Hashing algorithms have been extended to support SHA512, increasing the number of supported cipher suites.
• Recording encryption on iSCSI targets now supports certificates using RSA key lengths of up to 4K bits as well as elliptic curve keys.

Changes:
• An issue with DNS queries has been fixed.
• Imaging improvements to reduce motion blur on FLEXIDOME panoramic 5100i.
• An issue where metadata generation settings could be lost after a reboot is fixed.
• An issue is fixed with unstable IVA trajectories.
• An issue is fixed with 802.1x network authentication when using a certain type of certificate.
• Missing heater configuration settings have been re-enabled for FLEXIDOME multi 7100i models.
• Audio interface has been extended to support internal and external microphones on applicable cameras.
• Default bitrates for H.264 and H.265, which typically differ due to the better compression factor of H.265, are now correctly applied when switching encoding algorithms.
• Improved security baseline by regular update of components and libraries.
•

SHA256: BD4CED5D18A5D65BCE37CE5411B9065F4157D25FEE1D398FBCCAB1A2B3684BC6

New Features:
• Support of new camera family DINION 5100i IR.
• Support of new camera family FLEXIDOME corner 7100i IR.
• Support of new camera family FLEXIDOME micro 3100i.
• Introducing Intelligent Video Analytics (IVA) Pro Visual Gun Detection, based on Deep Learning and is designed for automatic detection of people and brandished firearms. Deployable under a dedicated license, IVA Pro Visual Gun Detection is available for deployment on DINION 5100i IR, DINION 7100i IR, FLEXIDOME indoor 5100i (IR) and FLEXIDOME outdoor 5100i (IR).
• Introducing Scene Mode Configuration for 3rd party License Plate Recognition solutions. This mode can be selected in the GUI and aim to optimizes image clarity for LPR analysis, on 3rd party software like VMSs or servers, by fine-tuning camera settings.
• The Temporal/Spatial Noise Filtering sliders have been reinstated in the latest update. This feature provides precise control over bitrate and image quality, allowing for a balanced adjustment between noise and motion blur.
• In version 9.00.0210, the Privacy Mode feature for CPP14 is presented as a demo. To access this feature, a global license needs to be deployed into the camera. Enabling the demo version of the Privacy mode:
• 22-01.85.01-CEC36083-7BE934CF-4193C2F8-0EFB206D-8F7307B9 And the default configurations can be re-activated by installing:
Disabling the demo version of the Privacy mode:
• 22-01.85.00-EFCC4FE1-C8DE66F8-0822F9C4-4D0DF3B7-40688183 Under the global license, users have the flexibility to enable or disable the privacy mode. In privacy mode:
• Blurring pattern masks (pixelization) can be applied to static privacy masks to allow IVA to detect objects behind the masks while safeguarding the privacy of the region. To set this pattern, check the privacy masks tabs on the Web-GUI.
• Privacy mode can be enabled, acting as a dynamic privacy mask that blurs objects detected by the camera, such as people and cars. This should be activated through the encoding and installer menu on the Web-GUI. As a demonstration of the feature, some limitations on performance are expected and users’ feedback will be very valuable for improvements on the first official version of the feature. The feature is not available for FLEXIDOME micro 3100i, FLEXIDOME multi 7000i and FLEXIDOME multi 7000i IR.
• Implemented support for 5MP devices, enabling them to efficiently handle 3MP (16:9) resolution at 2304 × 1296, including an upright mode. Additionally, 4CIF resolutions of 704x480@30fps (NTSC) and 704x576@25fps (PAL) are now also supported.
• Implemented white LED support for user-installable LED. The support is restricted to the DINION 7100i IR product family and can be enabled via the Web-GUI of the cameras as soon as the White LED is connected to the camera.
• We've introdu

SHA256: E27CAD41338715B8318D5717F9F2C486D85C706F66CE7501C4E4FB71A9FDB742

New Features:
• Support of new camera family DINION 7100i IR.
• Intelligent Streaming is now also introduced on CPP14 cameras, radically reducing bit rates of encoded video while keeping image quality on high levels. As known from earlier platforms, different levels of bitrate optimization are selectable. Also refer to our ‘Bosch_IntelligentStreaming_WhitePaper.pdf’.
• Autocalibration allows the calibration of the cameras with minimal effort, just providing camera orientation and height. The camera will start the calibration process by using the P3D detector to identify objects and use this data as an input for estimating calibration. Once sufficient data is collected the camera is fully calibrated.
• Intelligent Audio Analytics is now commercially available on FLEXIDOME panoramic 5100i based on a perpetual license that can be ordered separately and installed via Remote Portal. This license enables audio analytics with sound detectors for:
• T3 Alarm, Smoke detectors, three intermittent beeps followed by a period of silence
• T4 Alarm, Carbon monoxide detectors, four intermittent beeps followed by a period of silence
• Gunshot Direction of sound is detected and included in metadata. Alarms created by audio analytics are made available via the same interfaces used by other analytics, thus allow an easy integration. A demo mode is available, including the possibility to upload audio samples for analysis.
• Support of Simple Network Enrollment Protocol (SCEP) to allow an easier integration into Public Key Infrastructure (PKI) due to highly automated certificate distribution and renewal. Also refer to the tech note ‘Bosch_CertificateManagement_TechNote.pdf’.
• Cameras with a USB port option can be equipped with a WLAN USB stick to make commissioning of cameras easier, especially using Project Assistant. Supported USB sticks are:
• Edimax V2 N150 (based on chipset RTL8188EU)
• TPLINK TL-WN725N
• Network Authentication 802.1x now supports certificates using elliptic curve certificates and SHA384 hashing algorithm.
• The cameras now support intermediate certificates.
• New 8.3MP resolution support for FLEXIDOME panoramic 5100i 9MP to improve compatibility with some video management systems.

Changes:
• An issue is fixed where the secure element could be permanently damaged due to wear-out of its internal flash memory. This issue is only applicable if video authentication is enabled with default settings, using MD5, SHA1 or SHA256 as hashing algorithm. The error was introduced with FW 8.50 and affects all firmware versions since. For more details refer to our Security Advisory BOSCH-SA-435698-BT, published at our Security Advisory web page https://www.boschsecurity.com/xc/en/support/product-security/security-advisories.html or visit our PSIRT website at http

SHA256: 24E8FBA942560F7D50D790F3DD91963202139214539866CDE740DB1841C9995A