Trying to update firmware on Galaxy VS 25kW to 6.118.0 remotely via web interface, how to?

[Theironman117]

Hi I am trying to fix a vulnerability in our Galaxy VS 25k UPS that is for a Web Application path traversal vulnerability that is fixed in the new firmware update. I downloaded the APC Powernet MIB 4.5.7 and tried to apply it via the web interface of the UPS > Configuration > NMC Firmware Update. When trying to apply the Powernet MIB 4.5.7 file I am getting an error of firmware update failed error 12. I know in the past, APC has always had their firmware on their NMC cards in a zip file with the executable to put in the firmware update file, but I do not see this under the Galaxy VS product page or the NMC 4 page either. In fact, I have been researching the past few days and can not find much on the NMC 4 product. I tried to use the firmware upgrade utility via NMC 3 and 2, but it cannot find the device on the network via those tools. Plus, the upgrade utility does not list the Galaxy VS as a compatible product. I am looking to have some help in fixing this vulnerability and would like a guide on how to upgrade our firmware on the UPS remotely. Thanks again.

[KarimEissa · Accepted solution]

Hello,

For Galaxy VS ,the  NMC 4 is embedded and and it is a part of  the unit system level controller ,so upgrading the NMC firmware is part of the complete firmware components ,so the NMC upgrade is done through a trained SR using internal service tool software that had the entire firmware package that includes the NMC4 embedded ,so the NMC 4 firmware can not be done using firmware update utility or any upgrade methods that used in NMC3 or NMC 2 in other devices ,so the upgrade can not be done remotely and SR should visit the site and download the firmware package  for unit firmware upgrade as these procedures requires  trained service person to perform this essential service procedures 

Regards,

Karim