CAP700 Firmware Downloads

Wiki mirrorView source
This page contains firmware files for CAP700 devices. Look to the table below or the changelog to find download links.
Stable firmware - this version has been tested through both internal QA processes and large-scale user deployments. All known issues have been resolved based on user reports and testing feedback. Stable firmware is currently used as the default for updates and is also deployed in mass production. To upgrade firmware using WebUI, follow the instructions in CAP700 Firmware.
Latest firmware - this is the most recent firmware release, featuring the latest updates, features, and fixes. While it has passed internal testing, it has not yet undergone widespread deployment or user validation. It may still contain undiscovered issues. We recommend testing on a small number of devices before considering broader updates.
Note: packages for Package Manager are independent from firmware and can be downloaded in the Package Downloads page.

FW checksums

Checksums for firmware files can be found here.

Changelog

CAP7_R_00.07.22.1 | 2026.04.13

  • Improvements
    • System
      • ustream-ssl: updated version to 2026-03-01
  • Fix
    • Services
      • IEC 60870-5 Client: fixed missing serial support validation checks
      • IEC 60870-5 Server: fixed package dependency issues and missing serial support validation checks
      • Modbus Client: fixed test requests due to missing broadcast option
      • RMS: fixed configuration permission issues that caused connection problems
    • System
      • Backup: fixed custom uci-default script execution
      • Backup: fixed ability to reset user password to device default password

CAP7_R_00.07.22 | 2026.03.25

  • New
    • Network
      • SMCroute: added support
    • Services
      • Data to Server: added webui option to toggle server certificate verification
      • DMVPN: added support for DMVPN configuration on GRE tunnels with IPv6 addressing
      • Events reporting: removed web user interface support
      • SNMP: added SNMP V3 users additional authentication types
    • System
      • Integrity: added functionality to verify file system integrity
      • WebUI: added Polish language support
  • Improvements
    • Network
      • DHCP server: added support for configuring multiple DHCP relay instances
      • DHCP server: added new DHCPv4 error status when parent interface has no IPv4 address
      • Dynamic routes: added mutual redirects between route status and dynamic route pages
      • Dynamic routes: improved display of OSPF routes
      • Dynamic routes: moved instance naming into edit modals for RIP
      • Firewall: improved performance across all firewall pages
      • Mobile: added a general signal quality metric, calculated from a combination of various mobile signal metrics
      • Network usage: added mutual redirects between "Connections" and "Network Usage" pages
      • Starlink: added retrieval of location information
      • wireless-regdb: updated version to 2026.02.04
    • Services
      • Auto Reply: added "Signal quality" parameter support
      • AWS IoT Core: added TPM support
      • Azure IoT Hub: added TPM support
      • BGP: added IPv6 support
      • BGP: moved instance naming into edit modals
      • Data to Server: added data compression
      • Data to Server: added TPM support
      • EoIP: added 'MTU' option
      • Event juggler: added HTTP URL scheme appendage if it is not defined in HTTP action
      • Event juggler: added TPM support
      • Event juggler: added "Signal quality" parameter support in output actions
      • Hotspot: reworked hotspot service
      • IEC 60870-5 Client: improved Information Objects tab usability and editing
      • IEC 60870-5 Client: added universal gateway support
      • IEC 60870-5 Server: added universal gateway support
      • IPsec: added additional proposal options
      • IPsec: removed duplicate proposals
      • IPsec: added automatic default route handling for route based IPsec
      • L2TPv3: improved "Cookie" and "Peer cookie" validation
      • Ledman: updated signal strength LED algorithm to use new value
      • Mobile Utilities: added "Signal quality" parameter support in status message
      • Modbus Client: added "Signal quality" parameter support in MQTT and Email actions
      • MQTT Broker: added certificate key length validation
      • MQTT Broker: added TPM support
      • MQTT Broker Bridge: added TPM support
      • MQTT Publisher: added TPM support
      • OpenVPN: improved server configuration when using a TAP device
      • OpenVPN: added 'Gateway IP address' option for bridged devices
      • PPTP: added client/server status information
      • RMS: updated the Connection Type field hint to reflect the current device connection frequency
      • SMPP: added TPM support
      • SNMP: added an option that makes ifIndex values persistent
      • Tailscale: added memory usage limitation option
      • TR-069: added input validations in set methods for nodes with read-write permissions
      • TR-069: added TR-143 based on "Issue 1 Amendment 1", with implementation-specific deviations
      • TR-069: improved Device.DHCPv4 object based on "TR-181 Issue 2 Amendment 20", with implementation-specific deviations
      • TR-069: added Device.Cellular object based on "TR-181 Issue 2 Amendment 20", with implementation-specific deviations
      • TR-069: added TPM support
      • Traffic Logging: added SFTP support for log uploading (with key support)
      • Traffic Logging: added FTPS support for log uploading
      • cURL: updated version to 8.18.0
      • EmailRelay: updated version to 2.5.2
      • FRR: updated version to 10.2.1
      • OpenVPN: updated version to 2.6.17
      • ovpn-dco: updated version to 0.2.20251017
      • Tailscale: updated version to 1.92.3
    • System
      • Access Control: added SSH, telnet and WebUI session termination support
      • Backup: improved backup to use API endpoints
      • Speed Test: implemented filters and sorting for the servers table
      • glib2: updated version to 2.87.1
      • libmodbus: updated version to v3.1.11
      • openssl: updated version to 3.0.19
  • Fix
    • Network
      • DHCP server: fixed DHCPv4 configuration page bug when parent interface has no IPv4 address
      • Mobile: fixed serving cell RSSI calculation on 5G SA networks
      • Mobile: fixed incorrect bandwidth parsing on 5G SA network
      • Topology: fixed lock functionality on touchscreen devices
      • VLAN: fixed port based VLAN being incorrectly reported as an available feature
      • Wireless: added an API error when multiple scans are performed at the same time
    • Services
      • BGP: fixed how neighborship is displayed for BGP when VRF is used
      • Call Utilities: fixed "Switch WiFi on/off" action execution
      • DLNA: fixed interface selection not showing WLAN interfaces that are not in any bridge
      • Email to SMS: fixed email deletion in some rare cases
      • EoIP: fixed issues with EoIP over L2TP configuration
      • Hotspot: fixed inconsistent session logout after disconnecting from wireless
      • IEC 60870-5 Client: fixed an issue where negative ASDU response results in a timeout
      • IEC 60870-5 Server: fixed server network not restarting after disabling “Allow remote access” when “Cyclic transmissions” are enabled
      • IEC 60870-5 Server: fixed flow control component placement to follow dependency order
      • IPsec: fixed IKEv1 allowing unsupported proposals
      • IPsec: fixed display of "Enable XAUTH" switch
      • Modbus Client: fixed service being launched without any requests to send
      • OpenVPN: fixed learn-address routing to handle IPv4/IPv6
      • OSPF: fixed firewall rule creation
      • SMS Utilities: fixed "Switch WiFi on/off" action execution
      • SNMP: fixed Event type Topology change Trap
      • SNMP: fixed port-based VLAN VID display
      • SNMP: fixed setting incorrect firewall rule family option
    • System
      • NTP: fixed the NTP server due to invalid packet headers
      • Package Manager: fixed IPTables NAT Extras package not migrating when updating from RutOS 7.12
      • PAM: fixed TACACS+ WebUI remote host parameter
      • Troubleshoot: fixed duplicate devices listed in the TCP dump configuration
  • CVE Patches
    • CVE-2025-11961 - 1.9 (LOW)
    • CVE-2025-13836 - 9.1 (CRITICAL)

CAP7_R_00.07.21.3 | 2026.03.24

  • Fix
    • System
      • Backup: fixed eSIM interface generation after uploading a backup
      • Reset Settings: fixed reset not responding

CAP7_R_00.07.21.2 | 2026.03.06

  • New
    • Network
      • Mobile: added eSIM activation through proxy server
  • Improvements
    • System
      • Site manager: added configurable DHCP option for client discovery
      • Site manager: added access control loss warning
  • Fix
    • Network
      • Network: fixed an edge-case network hang after device reboot
    • Services
      • Data to Server: fixed memory leak when using IEC 60870 5 as input and using output with custom format
      • IPsec: fixed IPsec data going through WWAN after adding WWAN hardware offload

CAP7_R_00.07.21.1 | 2026.02.26

  • Fix
    • Services
      • Modbus Client: fixed missing parameters preventing testing of API-created requests in WebUI
    • System
      • Site manager: fixed missing config files in SDK

CAP7_R_00.07.21 | 2026.02.17

  • New
    • Network
      • Mobile: added "m2m" APN for "Spark M2M" operator to APN database
      • Mobile: added "iot" APN for "One NZ IOT" operator to APN database
      • MPLS: added LDP support
    • System
      • PAM: added TACACS+ external user support
      • Site manager: added site manager functionality
  • Improvements
    • Network
      • Firewall: added IPv6 masquerading support
      • Mobile: added SIM switch rule "On operator or country code"
      • Mobile: improved mobile data connection times on some cellular networks
      • Network: added IPv4 subnet conflict warning and notification
      • Wireless: added WPA2-PPSK authentication support
      • ethtool: updated version to 6.15
      • Netifd: updated version to 2025-05-23
    • Services
      • BGP: added debug option
      • Data to Server: moved "Add new" button to table header for smaller screens
      • Data to Server: added failed MQTT messages count to MQTT server to restart broker connection when threshold is reached
      • DLMS: added options for configuring the logical and short name on a COSEM value
      • DLMS: improved test requests to not freeze when running many of them at the same time
      • Event juggler: moved "Add new" button to table header for smaller screens
      • IPsec: added ability to specify local and remote passthrough networks
      • Modbus Client: improved test requests to not freeze when running many of them at the same time
      • Modbus Client: added tolerance and tolerance timeout options for on-change storage with threshold comparisons and periodic refresh
      • MQTT Broker: updated TLS option names
      • MQTT Broker Bridge: updated TLS option names
      • OPC UA Client: loosened data type validations, allowing more versatile data extraction
      • OPC UA Server: added support for configuring data sources, which allows exposing values from other services
      • OpenVPN: added support for generating client configuration from the server configuration
      • OSPF: added debug option
      • RIP: added debug option
      • SNMP: added multiple hosts support in Trap Settings
      • SNMP: added Data Source support
      • SNMP: added warning stating that selected Authentication type MD5 is not secure
      • SNMP: made SNMP community names hidden for unprivileged users
      • SSTP: added IPv6 support
      • TR-069: added TLS and mTLS support
    • System
      • CLI: added opkg notice about using third-party feeds
      • NTP Client: improved initial system time accuracy when "Save time to flash" is enabled
      • Update Firmware: split firmware update page to device and modem tabs
      • Update Firmware: added latest/stable firmware option in firmware page
      • WebUI: improved search performance
      • WebUI: expanded search function to include results from available to install packages in package manager
      • WebUI: updated footer design
      • WebUI: added footer customization options for GPL builds
  • Fix
    • Network
      • DHCP server: added validation to prevent bridge and passthrough IP address usage for static leases
      • Mobile: fixed network type occasionally being erroneously reported as 5G-SA when connected to 5G-NSA
      • Mobile: fixed SIM PINs being kept in MNF when performing a factory reset with a SIM inserted
      • Multi AP: fixed incorrectly displayed access point enable switch state
      • Multi WAN: fixed failover not working after changing firewall settings
      • Network: fixed hardware offload on ethernet interfaces
      • Network usage: fixed multiple issues that prevented the table from displaying
      • Static Routes: fixed applying static IPv6 routes after device restart
      • Wireless: fixed displaying associated client information when more than 270 clients are connected
    • Services
      • Azure IoT Hub: fixed timed out message re-sending in some edge cases
      • Data to Server: fixed example Lua output script not working correctly with data containing double quotes
      • DLNA: fixed interfaces not having WLAN
      • DNP3 Outstation: fixed binary output status data type in outstation data sources
      • Dynamic DNS: fixed core handling of user input for 'cloudflare.com-v4'
      • Event juggler: fixed SMS action retry functionality not working in certain cases
      • Event juggler: fixed incorrect configuration parsing
      • GRE: fixed state display when used with IPsec
      • Hotspot: fixed issues with download/upload limits
      • IEC 60870-5 Server: fixed validations when saving multiple configurations
      • IPsec: fixed firewall rule handling when instance is deleted
      • IPsec: fixed route based interface to be disabled when instance is disabled
      • IPsec: removed disabled state from "logs" and "active clients" when user has no write permissions
      • IPsec: fixed status endpoint to ignore zombie clients
      • IPsec: fixed DNS server update on connection
      • IPsec: fixed ID validation for API Post
      • Modbus Client: fixed Modbus write request function validation in Modbus TCP Client
      • Modbus Client: changed test requests to use the correct request ID
      • Modbus Client: fixed validation in Modbus Device requests, requests configuration now displays full function name
      • OSPF: fixed interfaces not having WLAN
      • Package Manager: fixed removing orphan packages when any package dependency is not installed
      • RIP: fixed interfaces not having WLAN
      • RMS: fixed reconnection problem
      • RMS: fixed reconnection timer reset issue
      • SSTP: fixed address parsing when a URL protocol is used
      • SSTP: fixed adding routes to remote server
      • Wireguard: fixed startup after device reboot
      • Zerotier: fixed custom planet file permissions
    • System
      • JSON-RPC: fixed permissions for "file" methods
      • Profiles: excluded Data Limit and IP Block databases from profiles
      • Update Firmware: fixed download from FOTA after cancelling firmware upload

CAP7_R_00.07.20.3 | 2026.01.23

  • Initial firmware release