Firmware NDV-5703-A

New Features:
N/A

Changes:
• An issue which provided a possibility to conduct a buffer overflow while operating SNMP has been fixed (CVE-2025-68615).
• An issue where the DNS address provided by the DHCP server was not being applied when DHCP was enabled has been fixed.
• Fixed an issue where vehicle color was not included in the ONVIF Profile M metadata stream for IVA Pro LPR.
• Fixed an issue where inaccurate and erratic trajectory data caused false wrong-way detection alerts in IVA Pro Traffic, particularly affecting truck detection and large vehicles.
• Fixed an issue where MQTT line-crossing events reported the initial object classification instead of the final corrected one, resulting in incorrect class reporting for VCA counting tasks.
• Improved live streaming stability with Genetec Security Center SaaS under low bandwidth conditions.
• Improved HTTPS handshake negotiation for faster initial connection establishment, reducing page load times and improving responsiveness when sending commands to the device.
• Fixed an issue where IVA Pro LPR with Webhook was not including the camera's Longitude, Latitude, and Camera Name in the event output.
• Fixed several issues in the recording engine related to retention time handling, recording mode fallback, and DST timezone offset block separation.
• Improved tone mapping and auto-exposure algorithms for better image quality and responsiveness under varying lighting conditions.

SHA256: D1BD9AEEFC5BF29FD556516FD67B39F0EE45C5D38C917A1B58D01BC38AD4CF99

New Features:
• Added a new command to extract snapshots from the device with selectable stream source “<camera.ip.address>/snap.jpg?JpegSourceEncoder=N”, where “N” specifies the target stream number to retrieve the snapshot

Changes:
• Fixed a high-severity CVSS Rating (7.5) vulnerability. The addressed fix safeguards the system to prevent unintended service interruption. This issue affected firmware version 9.80.0087 only and earlier firmware versions were not impacted.
• Fix improves the internal process managing Intelligent Video Analytics (IVA) of IVA Pro LPR, IVA Pro Appearance, IVA Pro PPE and IVA Direct-to-Cloud Verification for IVA Pro Visual Gun Detection, enabling automatic recovery from temporary service interruptions. Tests confirmed stable IVA recovery without user intervention, minimizing connection loss symptoms. Further enhancements for edge cases are planned for the next official firmware release.
• Resolved an issue where device recordings could become temporarily inaccessible through Genetec Security Center SaaS when specific combinations of frame rate and stream configuration settings were applied.
• Resolved an issue where camera onboarding to Genetec Security Center SaaS could be blocked by an error following a factory reset of a previously connected device.
• Improved the ONVIF search session handling to provide faster responses during forensic searches in third-party VMS platforms that support ONVIF.
• Resolved an issue where the device continued DHCPv4 discovery while configured for IPv6- only operation. IPv4 traffic is now fully disabled in IPv6 mode, preventing unnecessary DHCPv4 broadcast traffic and related network alerts. SLAAC operation in IPv6 mode has been corrected to ensure proper address assignment.
• Resolved an issue in IVA Pro LPR where the device could enter a crash loop over time when LPR Analysis was enabled and rules were configured, but the MQTT settings were not set.
• Resolved an issue where LPR Make and Model metadata retrieved via HTTPS could be incomplete or missing.
• Resolved an issue in IVA Pro LPR where importing license plate lists from CSV files containing more than 50 entries could fail with a “Failed to fetch” error. The import process has been corrected to reliably handle larger datasets.

SHA256: 3DC6277E45611DC7CD0CED0710EEF3929C15AC97951EB6830AF11F38FC07BE5F

New Features:
• Added a new command to extract snapshots from the device with selectable stream source “<camera.ip.address>/snap.jpg?JpegSourceEncoder=N”, where “N” specifies the target stream number to retrieve the snapshot

Changes:
• Fixed a high-severity CVSS Rating (7.5) vulnerability. The addressed fix safeguards the system to prevent unintended service interruption. This issue affected firmware version 9.80.0087 only and earlier firmware versions were not impacted.
• Fix improves the internal process managing Intelligent Video Analytics (IVA) of IVA Pro LPR, IVA Pro Appearance, IVA Pro PPE and IVA Direct-to-Cloud Verification for IVA Pro Visual Gun Detection, enabling automatic recovery from temporary service interruptions. Tests confirmed stable IVA recovery without user intervention, minimizing connection loss symptoms. Further enhancements for edge cases are planned for the next official firmware release.
• Resolved an issue where device recordings could become temporarily inaccessible through Genetec Security Center SaaS when specific combinations of frame rate and stream configuration settings were applied.
• Resolved an issue where camera onboarding to Genetec Security Center SaaS could be blocked by an error following a factory reset of a previously connected device.
• Improved the ONVIF search session handling to provide faster responses during forensic searches in third-party VMS platforms that support ONVIF.
• Resolved an issue where the device continued DHCPv4 discovery while configured for IPv6- only operation. IPv4 traffic is now fully disabled in IPv6 mode, preventing unnecessary DHCPv4 broadcast traffic and related network alerts. SLAAC operation in IPv6 mode has been corrected to ensure proper address assignment.
• Resolved an issue in IVA Pro LPR where the device could enter a crash loop over time when LPR Analysis was enabled and rules were configured, but the MQTT settings were not set.
• Resolved an issue where LPR Make and Model metadata retrieved via HTTPS could be incomplete or missing.
• Resolved an issue in IVA Pro LPR where importing license plate lists from CSV files containing more than 50 entries could fail with a “Failed to fetch” error. The import process has been corrected to reliably handle larger datasets.

SHA256: B75F09D503CF6F938E5458CC9E7EAE657E54A842D680D05F9B3D5D170FB447B5

New Features:
• Support of DINION 3100i IR and FLEXIDOME indoor/micro/outdoor 3100i models.
• Support of DINION 7100i IR with 8MP and telescopic lens.
• Default settings have been changed for the RCP+, HTTP and RTSP ports. These will become effective with new cameras and by factory-defaulting a camera but will not be affected by upgrading firmware to avoid functional interrupts of existing installations. For detailed information on “Security by Default” please refer to our tech note at https://www.boschsecurity.com/xc/en/solutions/video-systems/data-security/#downloads
• Support of Privacy Mode without requiring a license. The demo license keys mentioned with firmware 9.00 are deprecated. Settings from the demo mode will be inherited.
• Blurring pattern masks (pixelization) can be applied to static privacy masks to allow IVA to detect objects behind the masks while safeguarding the privacy of the region. To set this pattern, check the privacy masks tabs on the Web-GUI.
• Privacy mode can be enabled, acting as a dynamic privacy mask that blurs objects detected by the camera, such as people and cars. This should be activated through the encoding and installer menu on the Web-GUI. The feature is not available for FLEXIDOME indoor/micro/outdoor 3100i, FLEXIDOME multi 7000i and FLEXIDOME multi 7000i IR.
• The Bosch font used for on-screen display (video stamping) has been exchanged to support a wider range of languages, including Hebrew as well as Arabic and Asian languages. Some of these fonts require right-to-left support, which is now also supported.
• Improved motion streaming has been implemented to provide better image quality with lower noise and motion artifacts, thus allowing an even further reduced bitrate.
• Hashing algorithms have been extended to support SHA512, increasing the number of supported cipher suites.
• Recording encryption on iSCSI targets now supports certificates using RSA key lengths of up to 4K bits as well as elliptic curve keys.

Changes:
• An issue with DNS queries has been fixed.
• Imaging improvements to reduce motion blur on FLEXIDOME panoramic 5100i.
• An issue where metadata generation settings could be lost after a reboot is fixed.
• An issue is fixed with unstable IVA trajectories.
• An issue is fixed with 802.1x network authentication when using a certain type of certificate.
• Missing heater configuration settings have been re-enabled for FLEXIDOME multi 7100i models.
• Audio interface has been extended to support internal and external microphones on applicable cameras.
• Default bitrates for H.264 and H.265, which typically differ due to the better compression factor of H.265, are now correctly applied when switching encoding algorithms.
• Improved security baseline by regular update of components and libraries.
•

SHA256: BD4CED5D18A5D65BCE37CE5411B9065F4157D25FEE1D398FBCCAB1A2B3684BC6

New Features:
• Support of new camera family DINION 5100i IR.
• Support of new camera family FLEXIDOME corner 7100i IR.
• Support of new camera family FLEXIDOME micro 3100i.
• Introducing Intelligent Video Analytics (IVA) Pro Visual Gun Detection, based on Deep Learning and is designed for automatic detection of people and brandished firearms. Deployable under a dedicated license, IVA Pro Visual Gun Detection is available for deployment on DINION 5100i IR, DINION 7100i IR, FLEXIDOME indoor 5100i (IR) and FLEXIDOME outdoor 5100i (IR).
• Introducing Scene Mode Configuration for 3rd party License Plate Recognition solutions. This mode can be selected in the GUI and aim to optimizes image clarity for LPR analysis, on 3rd party software like VMSs or servers, by fine-tuning camera settings.
• The Temporal/Spatial Noise Filtering sliders have been reinstated in the latest update. This feature provides precise control over bitrate and image quality, allowing for a balanced adjustment between noise and motion blur.
• In version 9.00.0210, the Privacy Mode feature for CPP14 is presented as a demo. To access this feature, a global license needs to be deployed into the camera. Enabling the demo version of the Privacy mode:
• 22-01.85.01-CEC36083-7BE934CF-4193C2F8-0EFB206D-8F7307B9 And the default configurations can be re-activated by installing:
Disabling the demo version of the Privacy mode:
• 22-01.85.00-EFCC4FE1-C8DE66F8-0822F9C4-4D0DF3B7-40688183 Under the global license, users have the flexibility to enable or disable the privacy mode. In privacy mode:
• Blurring pattern masks (pixelization) can be applied to static privacy masks to allow IVA to detect objects behind the masks while safeguarding the privacy of the region. To set this pattern, check the privacy masks tabs on the Web-GUI.
• Privacy mode can be enabled, acting as a dynamic privacy mask that blurs objects detected by the camera, such as people and cars. This should be activated through the encoding and installer menu on the Web-GUI. As a demonstration of the feature, some limitations on performance are expected and users’ feedback will be very valuable for improvements on the first official version of the feature. The feature is not available for FLEXIDOME micro 3100i, FLEXIDOME multi 7000i and FLEXIDOME multi 7000i IR.
• Implemented support for 5MP devices, enabling them to efficiently handle 3MP (16:9) resolution at 2304 × 1296, including an upright mode. Additionally, 4CIF resolutions of 704x480@30fps (NTSC) and 704x576@25fps (PAL) are now also supported.
• Implemented white LED support for user-installable LED. The support is restricted to the DINION 7100i IR product family and can be enabled via the Web-GUI of the cameras as soon as the White LED is connected to the camera.
• We've introdu

SHA256: E27CAD41338715B8318D5717F9F2C486D85C706F66CE7501C4E4FB71A9FDB742

New Features:
• Support of new camera family DINION 7100i IR.
• Intelligent Streaming is now also introduced on CPP14 cameras, radically reducing bit rates of encoded video while keeping image quality on high levels. As known from earlier platforms, different levels of bitrate optimization are selectable. Also refer to our ‘Bosch_IntelligentStreaming_WhitePaper.pdf’.
• Autocalibration allows the calibration of the cameras with minimal effort, just providing camera orientation and height. The camera will start the calibration process by using the P3D detector to identify objects and use this data as an input for estimating calibration. Once sufficient data is collected the camera is fully calibrated.
• Intelligent Audio Analytics is now commercially available on FLEXIDOME panoramic 5100i based on a perpetual license that can be ordered separately and installed via Remote Portal. This license enables audio analytics with sound detectors for:
• T3 Alarm, Smoke detectors, three intermittent beeps followed by a period of silence
• T4 Alarm, Carbon monoxide detectors, four intermittent beeps followed by a period of silence
• Gunshot Direction of sound is detected and included in metadata. Alarms created by audio analytics are made available via the same interfaces used by other analytics, thus allow an easy integration. A demo mode is available, including the possibility to upload audio samples for analysis.
• Support of Simple Network Enrollment Protocol (SCEP) to allow an easier integration into Public Key Infrastructure (PKI) due to highly automated certificate distribution and renewal. Also refer to the tech note ‘Bosch_CertificateManagement_TechNote.pdf’.
• Cameras with a USB port option can be equipped with a WLAN USB stick to make commissioning of cameras easier, especially using Project Assistant. Supported USB sticks are:
• Edimax V2 N150 (based on chipset RTL8188EU)
• TPLINK TL-WN725N
• Network Authentication 802.1x now supports certificates using elliptic curve certificates and SHA384 hashing algorithm.
• The cameras now support intermediate certificates.
• New 8.3MP resolution support for FLEXIDOME panoramic 5100i 9MP to improve compatibility with some video management systems.

Changes:
• An issue is fixed where the secure element could be permanently damaged due to wear-out of its internal flash memory. This issue is only applicable if video authentication is enabled with default settings, using MD5, SHA1 or SHA256 as hashing algorithm. The error was introduced with FW 8.50 and affects all firmware versions since. For more details refer to our Security Advisory BOSCH-SA-435698-BT, published at our Security Advisory web page https://www.boschsecurity.com/xc/en/support/product-security/security-advisories.html or visit our PSIRT website at http

SHA256: 24E8FBA942560F7D50D790F3DD91963202139214539866CDE740DB1841C9995A

Changes:
• An issue is fixed for FLEXIDOME indoor 5100i and FLEXIDOME outdoor 5100i, caused by a misconfiguration during production, where Secure Boot has not been enabled as required for all CPP14 products. Other CPP14.2 products are not affected. A specific tech bulletin was created to provide detailed information about affected models and production dates. This fix will enable Secure Boot for affected cameras. It has no impact on any other functionality but will increase the security level of affected cameras to where it is supposed to be. It is strongly recommended to update affected cameras for best protection. The fix will remain in future firmware to enable Secure Boot on affected cameras even if such a camera will not be updated with this firmware but a later one only.

SHA256: 174B6EF412405C0C94C501C5ED1B8D6A77168592FFE8AC7A16089E3309B2FBDD

New Features:
• Adaptive IR has been introduced based on scene content to avoid over-exposure if objects are close to the camera.
• Highly reliable SD card recording with life cycle monitoring Industrial SD cards which provide wear level data can be monitored for their health and expected lifetime, providing much more reliable SD card recording. Three vendors have been tested and qualified:
• Micron
• Sony
• Western Digital (SanDisk) Due to the high dynamic in the Industrial SD card market, no direct reference to the models can be given. Therefore, Bosch has selected specific WD models and provides them as accessory:
• MSD-064G, MSD-128G, MSD-256G, SD-064G, SD-128G, SD-256G
• Genetec Stratocast support has been re-enabled with the same feature set as known from former platforms.
• Dynamically colored privacy masks, depending on surrounding video added. This can be used to not distract the operator due to intense color, e. g. white privacy mask in night scene.
• A stronger hashing algorithm, SHA384, is supported for HTTPS and network authentication 802.1x usages with RSA key certificates.
• The network parameter ‘hostname’ now remains in the configuration during factory default sequence due to application variant switching.
• Support of up to 4096 bit RSA key length in the Secure Element. This allows the creation of Certificate Signing Requests with up to 4096 bit RSA keys, and securing private data with hardware-protected 4096 bit RSA encryption and signature keys.
• Certificates with key length of 3072 bit and 4096 bit, using hashing algorithm of up to SHA256, can be used for HTTPS, EAP-TLS and user authentication usages.
• Network authentication 802.1x with EAP-MD5 and EAP-TLS is now supported.
• More streaming resolutions were added on streams 2 and 3.
• Support of ONVIF Profile M, including MQTT event forwarding.
• New Western Digital industrial SD cards with lifespan monitoring are supported.
• SNMP has been added, supporting v1 and v3, both including traps. RCP+ integration is widely done to create similar support as of earlier platforms. New MIB file is available and distributed with the firmware package.
• IR intensity level can be independently configured for each of the center and the four surrounding regions.
• Privacy masks can be enabled and disabled via a single switch command.
• For backward compatibility with legacy clients, applicable where alternative measures are put in place, the check on the HTTP referrer, an improvement to reduce the vulnerability for Cross Site Request Forgery (CSRF) attacks, can be disabled via the user interface.
• TLS 1.3 is supported, including the possibility to set the minimum TLS version.

SHA256: 88CEE37A21298F2C7A88ECA19E867F831A875D7D3C43BC752DCACE6B2A5F22FE

New Features:
• Adaptive IR has been introduced based on scene content to avoid over-exposure if objects are close to the camera.
• Highly reliable SD card recording with life cycle monitoring Industrial SD cards which provide wear level data can be monitored for their health and expected lifetime, providing much more reliable SD card recording. Three vendors have been tested and qualified:
• Micron
• Sony
• Western Digital (SanDisk) Due to the high dynamic in the Industrial SD card market, no direct reference to the models can be given. Therefore, Bosch has selected specific WD models and provides them as accessory:
• MSD-064G, MSD-128G, MSD-256G, SD-064G, SD-128G, SD-256G

Changes:
• On FLEXIDOME panoramic 5100i, dynamically colored privacy masks have temporarily been disabled due to an issue that will be fixed in next version.
• An issue is fixed for the Remote Portal credentials where necessary network settings were set to default on application variant switching.
• An issue is fixed where audio format could not be changed in browser after recording stopped, only after refreshing or re-opening the browser, or rebooting the camera.
• An issue is fixed where the SNMP trap community name could not be changed.
• An issue with certain VCA events erroneously reporting ‘signal loss’ via ONVIF is fixed.
• Experimental Intelligent Audio Analytics are removed from this version. Installed pilot licenses will not work anymore.

SHA256: B2215514819C4966E02B2EDD833F147D2B65F77CDF6A624528E438E6BC050AED

New Features:
• Support for new FLEXIDOME indoor 5100i (IR) and FLEXIDOME outdoor 5100i (IR) cameras, including support for
• Electronic Image Stabilization (EIS)
• Analog output on 2 MP and 5MP IR models
• Introduction of new Intelligent Video Analytics (IVA) Pro Packs with new licenses:
• FLEXIDOME indoor/outdoor 5100i cameras are equipped with IVA Pro Buildings Pack. Based on deep learning, the IVA Pro Buildings Pack is ideal for intrusion detection and operational efficiency in and around buildings. Without the need for any calibration, it can reliably detect, count, and classify persons and vehicles in crowded scenes.
• The IVA Pro Perimeter Pack is well-suited for reliable long-range intrusion detection, alongside perimeters of buildings, energy facilities, and airports even in extreme weather. Based on advanced background subtraction, it can detect crawling, rolling, and other suspicious movements inside, outside, and under various environmental and lighting conditions while minimizing false triggers. IVA Pro Perimeter Pack is an additional, licensed option on the FLEXIDOME indoor/outdoor 5100i cameras. It also includes Camera Trainer.
• The IVA Pro Traffic Pack is designed for ITS applications such as counting and classification, as well as Automatic Incident Detection. Robust algorithms based on deep neural networks are trained to detect and differentiate persons, bicycle, motorbikes, cars, busses and trucks while ignoring potential disturbances caused by vehicle headlights or shadows, extreme weather, sun reflections, and shaking cameras. IVA Pro Traffic Pack is an additional, licensed option on the FLEXIDOME indoor/outdoor 5100i cameras.
• On FLEXIDOME panoramic 5100i, in onboard dewarping mode, the supported resolutions for line 2 and line 3 have been increased:
• For e-PTZ, a maximum resolution of 2 MP is supported.
• For quad view, a maximum resolution of 5.3 MP is supported.
• For double panoramic, a maximum resolution of 3.7 MP is supported.
• A corridor mode with 1.9 MP is available.
• The former maximum resolution, 1.3 MP, is still the maximum for panoramic and full panoramic, and is also still available for the other modes except for the new corridor mode.
• On FLEXIDOME panoramic 5100i, up to 6 pre-positions can be set and saved for the dewarped view modes.
• FLEXIDOME panoramic 5100i is prepared for Intelligent Audio Analytics. Limited pilot licenses can be shared upon special request.
• Genetec Stratocast support has been re-enabled with the same feature set as known from former platforms.
• Dynamically colored privacy masks, depending on surrounding video added. This can be used to not distract the operator due to intense color, e. g. white privacy mask in night scene.
• A stronger hashing algorithm, SHA384, is supported for HT

SHA256: 32C11336717E5718E82A11FA224388BE6DE6DA8D1C8D2FD37B13C8349DE36E3D