Welcome to the new Schneider Electric Community

It's your place to connect with experts and peers, get continuous support, and share knowledge.

Close
Important Announcement: WELCOME to the new Schneider Electric Community! Community is now no longer part of Exchange, and is now rebranded under se.com. If you have any bookmarks and links saved, we request you to update them to ensure that you continue accessing our community from this new location. For any issues that you might encounter as part of this change, please reach out to SchneiderCommunity.Support@se.com, and the team will help to get your issues resolved.
Invite a Co-worker
Send a co-worker an invite to the Exchange portal.Just enter their email address and we’ll connect them to register. After joining, they will belong to the same company.
Send Invite Cancel
82470members
350043posts

SMT1500: Which Wizard 4.3 Firmware file?

APC UPS for Home and Office Forum

Schneider Electric support forum for our APC offers including Home Office UPS, Surge Protectors, UTS, software and services and associated products designed to share knowledge, installation, and configuration.

MysteryGuy_apc
Ensign
Ensign
0 Likes
9
804

SMT1500: Which Wizard 4.3 Firmware file?

Seeing that there was a new Wizard released for security vulnerabilities I decided to try and update my SMT1500 UPSs firmware.

 

I started the Firmware Update Wizard and it said the UPS could be updated. (The UPS display lists the current Firmware as UPS 09.6 ID 18. The wizard lists id's of

 

9.6

MCU 20.0

UBL 08.5

MBL 20.0.

 

So I was surprised to see the Wizard show me two possible Firmware Files:

 

Which one am I supposed to actually use? I also have an SMT1500C. Which file is good for that one (ID 1015 - 39 I think)?

 

Which.jpg

 

 

 

Tags (1)
9 Replies 9
LarryK
Lieutenant JG
Lieutenant JG
0 Likes
8
795

Re: SMT1500: Which Wizard 4.3 Firmware file?

Did you look carefully at this KB article?

 

https://www.apc.com/us/en/faqs/FA279197/

 

Based on my reading and what you are saying, if you are at UPS 09.6 ID 18 then you are current.


There should be no need to update.

 

 

Tags (1)
MysteryGuy_apc
Ensign
Ensign
0 Likes
7
790

Re: SMT1500: Which Wizard 4.3 Firmware file?

I did look at the referenced FAQ. But when I looked at the Security warning at https://regmedia.co.uk/2022/03/09/schnieder_advisory.pdf it seemed to say that 'affected versions' (for one of the vulnerabilities) was '9.8 or earlier' in my case of ID 18.

 

But thinking about it, even the other file seems to only be '9.8' judging from the file name.

 

I guess I also thought that it would tell me if I actually needed the update (but maybe that doesn't happen until you pick the correct file).

 

In any event, it would still be nice to know what file I'm supposed to use (since it wasn't obvious to me).

 

The Wizard documentation boldly stated

 

"Note: As shown in the above table, in some cases, there are two or more firmware images listed for the same UPS ID. This confusion is taken care by a new feature in Firmware Upgrade Wizard v4.3, that shows only the relevant and latest firmware for the connected UPS. "

 

which left me doubly confused (since I still saw more than one choice).

 

 

affected.jpg

Tags (1)
LarryK
Lieutenant JG
Lieutenant JG
0 Likes
6
785

Re: SMT1500: Which Wizard 4.3 Firmware file?

@BillP- seeking clarification, please.

 

Thanks!

Larry

Tags (1)
BillP
Administrator Administrator
Administrator
0 Likes
5
694

Re: SMT1500: Which Wizard 4.3 Firmware file?

@LarryK 

 

Our engineers are working on upgraded firmware for the UPS listed. Once firmware is available the security bulletin will be update and links to the new firmware will be added. 

 

Presently we have updated firmware for SmartConnect SMT and SMC Series. That firmware can be downloaded via the link in the bulletin, and customer that have there Smart Connected UPS connected to the cloud are being notified. 

 

Here is an example of the notice.

Firmware Out-of-Date.png 

To upgrade the firmware via the cloud see Schneider Electric FAQ FA340522

https://www.se.com/ww/en/faqs/FA340522/

 

Tags (1)
MysteryGuy_apc
Ensign
Ensign
0 Likes
0
688

Re: SMT1500: Which Wizard 4.3 Firmware file?

Thanks.

 

As far as my SMT1500 / ID=18 device goes I'll take another stab when updated firmware is available.

 

Hopefully, only one file will be offered by the Wizard then.

 

As far as my new SMT1500C / ID=1015 goes I updated it using the 4.3 Wizard today.

 

(I am using this locally attached by USB at this time, and so it's not network connected).

 

Seeing these CVEs is one of the reasons why... You are exposing your systems to possible remote hacking.

 

I guess I can't get the extra 1 year battery warranty though unless I network connect it (at least long enough to register it).

Tags (1)
LarryK
Lieutenant JG
Lieutenant JG
0 Likes
3
571

Re: SMT1500: Which Wizard 4.3 Firmware file?

@BillP 

Here's a new question - not the OP's.

 

I have SmartConnect devices that I had to remove from that portal in order to get them under EcoStruxure IT.

So I'm NEVER going to get that alert - they are no longer in the cloud.

In fact, EcoStruxure IT can't tell me what the "ID" version is.  Apparently that's not something they considered or track.

So how am I going to know if I have to - or when to - update these devices?

 

Thanks!

 

Larry

Tags (1)
BillP
Administrator Administrator
Administrator

Re: SMT1500: Which Wizard 4.3 Firmware file?

Tags (1)
LarryK
Lieutenant JG
Lieutenant JG
0 Likes
1
531

Re: SMT1500: Which Wizard 4.3 Firmware file?

Back to the OP's original question.

 

I have an SMT1000RM2U.

I ran the Firmware Upgrade wizard and was presented with the same two files.

 

Which one am I supposed to actually use?

 

The first, the second, or both?

Tags (1)
LarryK
Lieutenant JG
Lieutenant JG
0 Likes
0
528

Re: SMT1500: Which Wizard 4.3 Firmware file?

@MysteryGuy_apc 

 

Got this response from APC Support:

 

As per the article, please use SMT18UPS_09-6.enc

 

986-1525Q_UPS_09-8_ID18 is for a specific firmware fix for another SMT unit, not to be used unless advised.

And that information should have been supplied somewhere in the documentation...

Tags (1)