Firmware NUE-3703-F06

New Features:
N/A

Changes:
• An issue which provided a possibility to conduct a buffer overflow while operating SNMP has been fixed (CVE-2025-68615).
• An issue where the DNS address provided by the DHCP server was not being applied when DHCP was enabled has been fixed.
• Fixed an issue where vehicle color was not included in the ONVIF Profile M metadata stream for IVA Pro LPR.
• Fixed an issue where inaccurate and erratic trajectory data caused false wrong-way detection alerts in IVA Pro Traffic, particularly affecting truck detection and large vehicles.
• Fixed an issue where MQTT line-crossing events reported the initial object classification instead of the final corrected one, resulting in incorrect class reporting for VCA counting tasks.
• Improved live streaming stability with Genetec Security Center SaaS under low bandwidth conditions.
• Improved HTTPS handshake negotiation for faster initial connection establishment, reducing page load times and improving responsiveness when sending commands to the device.
• Fixed an issue where IVA Pro LPR with Webhook was not including the camera's Longitude, Latitude, and Camera Name in the event output.
• Fixed several issues in the recording engine related to retention time handling, recording mode fallback, and DST timezone offset block separation.
• Improved tone mapping and auto-exposure algorithms for better image quality and responsiveness under varying lighting conditions.

SHA256: D1BD9AEEFC5BF29FD556516FD67B39F0EE45C5D38C917A1B58D01BC38AD4CF99

New Features:
• Added a new command to extract snapshots from the device with selectable stream source “<camera.ip.address>/snap.jpg?JpegSourceEncoder=N”, where “N” specifies the target stream number to retrieve the snapshot

Changes:
• Fixed a high-severity CVSS Rating (7.5) vulnerability. The addressed fix safeguards the system to prevent unintended service interruption. This issue affected firmware version 9.80.0087 only and earlier firmware versions were not impacted.
• Fix improves the internal process managing Intelligent Video Analytics (IVA) of IVA Pro LPR, IVA Pro Appearance, IVA Pro PPE and IVA Direct-to-Cloud Verification for IVA Pro Visual Gun Detection, enabling automatic recovery from temporary service interruptions. Tests confirmed stable IVA recovery without user intervention, minimizing connection loss symptoms. Further enhancements for edge cases are planned for the next official firmware release.
• Resolved an issue where device recordings could become temporarily inaccessible through Genetec Security Center SaaS when specific combinations of frame rate and stream configuration settings were applied.
• Resolved an issue where camera onboarding to Genetec Security Center SaaS could be blocked by an error following a factory reset of a previously connected device.
• Improved the ONVIF search session handling to provide faster responses during forensic searches in third-party VMS platforms that support ONVIF.
• Resolved an issue where the device continued DHCPv4 discovery while configured for IPv6- only operation. IPv4 traffic is now fully disabled in IPv6 mode, preventing unnecessary DHCPv4 broadcast traffic and related network alerts. SLAAC operation in IPv6 mode has been corrected to ensure proper address assignment.
• Resolved an issue in IVA Pro LPR where the device could enter a crash loop over time when LPR Analysis was enabled and rules were configured, but the MQTT settings were not set.
• Resolved an issue where LPR Make and Model metadata retrieved via HTTPS could be incomplete or missing.
• Resolved an issue in IVA Pro LPR where importing license plate lists from CSV files containing more than 50 entries could fail with a “Failed to fetch” error. The import process has been corrected to reliably handle larger datasets.

SHA256: 3DC6277E45611DC7CD0CED0710EEF3929C15AC97951EB6830AF11F38FC07BE5F

New Features:
• Added a new command to extract snapshots from the device with selectable stream source “<camera.ip.address>/snap.jpg?JpegSourceEncoder=N”, where “N” specifies the target stream number to retrieve the snapshot

Changes:
• Fixed a high-severity CVSS Rating (7.5) vulnerability. The addressed fix safeguards the system to prevent unintended service interruption. This issue affected firmware version 9.80.0087 only and earlier firmware versions were not impacted.
• Resolved an issue where device recordings could become temporarily inaccessible through Genetec Security Center SaaS when specific combinations of frame rate and stream configuration settings were applied.
• Resolved an issue where camera onboarding to Genetec Security Center SaaS could be blocked by an error following a factory reset of a previously connected device.
• Improved the ONVIF search session handling to provide faster responses during forensic searches in third-party VMS platforms that support ONVIF.
• Resolved an issue where the device continued DHCPv4 discovery while configured for IPv6- only operation. IPv4 traffic is now fully disabled in IPv6 mode, preventing unnecessary DHCPv4 broadcast traffic and related network alerts. SLAAC operation in IPv6 mode has been corrected to ensure proper address assignment.

SHA256: 566B89C037E10BBF3067CE90DB4FDA4094EC5A32B5A466602D5B0F3AD8A3C837

New Features:
• Support of DINION 3100i IR and FLEXIDOME indoor/micro/outdoor 3100i models.
• Support of DINION 7100i IR with 8MP and telescopic lens.
• Default settings have been changed for the RCP+, HTTP and RTSP ports. These will become effective with new cameras and by factory-defaulting a camera but will not be affected by upgrading firmware to avoid functional interrupts of existing installations. For detailed information on “Security by Default” please refer to our tech note at https://www.boschsecurity.com/xc/en/solutions/video-systems/data-security/#downloads
• Support of Privacy Mode without requiring a license. The demo license keys mentioned with firmware 9.00 are deprecated. Settings from the demo mode will be inherited.
• Blurring pattern masks (pixelization) can be applied to static privacy masks to allow IVA to detect objects behind the masks while safeguarding the privacy of the region. To set this pattern, check the privacy masks tabs on the Web-GUI.
• Privacy mode can be enabled, acting as a dynamic privacy mask that blurs objects detected by the camera, such as people and cars. This should be activated through the encoding and installer menu on the Web-GUI. The feature is not available for FLEXIDOME indoor/micro/outdoor 3100i, FLEXIDOME multi 7000i and FLEXIDOME multi 7000i IR.
• The Bosch font used for on-screen display (video stamping) has been exchanged to support a wider range of languages, including Hebrew as well as Arabic and Asian languages. Some of these fonts require right-to-left support, which is now also supported.
• Improved motion streaming has been implemented to provide better image quality with lower noise and motion artifacts, thus allowing an even further reduced bitrate.
• Hashing algorithms have been extended to support SHA512, increasing the number of supported cipher suites.
• Recording encryption on iSCSI targets now supports certificates using RSA key lengths of up to 4K bits as well as elliptic curve keys.

Changes:
• An issue with DNS queries has been fixed.
• Imaging improvements to reduce motion blur on FLEXIDOME panoramic 5100i.
• An issue where metadata generation settings could be lost after a reboot is fixed.
• An issue is fixed with unstable IVA trajectories.
• An issue is fixed with 802.1x network authentication when using a certain type of certificate.
• Missing heater configuration settings have been re-enabled for FLEXIDOME multi 7100i models.
• Audio interface has been extended to support internal and external microphones on applicable cameras.
• Default bitrates for H.264 and H.265, which typically differ due to the better compression factor of H.265, are now correctly applied when switching encoding algorithms.
• Improved security baseline by regular update of components and libraries.
•

SHA256: BD4CED5D18A5D65BCE37CE5411B9065F4157D25FEE1D398FBCCAB1A2B3684BC6