Exigo 2.0 Release Notes

Exigo 2.0.3.2

• Name: EXIGO-2.0.3.2
• Version: 2.0
• Date: 26.10.2026
• Status: General Available
• OT Cybersecurity certified: Yes

Software included in EXIGO-2.0.3.2.zip

Product	Version	Product description
Management and Upgrade Tools	EMT v2.0.3.0, Zenitel-IMT_3.7.3.1_20250502_1156	Exigo Management Tool and Intercom management tool - for device upgrade
Device software	vsft-PA.10.0.3.1	Firmware for imx28 based VSFT devices
Domain Controller Software	vsfx-ec-2.0.3.2	Firmware for ICX-5x0 Domain Controller
Flowire 3 Software	vsf-fcdc3-2.0.3.0	Firmware for Flowire 3
SNMP MIB Files	DEVICES-MIB: 202203070000Z, CONTROLLER-MIB: 201111301600Z	SNMP MIB files for Exigo Devices and Domain Controller

Fixed issues

MTN-4995 Updated PHP to 8.2.35

Resolved vulnerabilities related to:

• CVE-2026-109618 - Incorrect handling of out-of-memory conditions while a request is being set up can leave request data partly initialized; the subsequent clean-up may then act on invalid memory state.
• CVE-2026-109619 - State belonging to a finished request can be retained by a PHP worker process after its memory has been released, and accessed by a later request before it is re-initialized.

Action: Upgrade ICX-AlphaCom to 1.5.3.8, Exigo to 1.7.3.8 and Exigo cybersecure to 2.0.3.2

EXI-67 SNMPv2 trap will always be sent when a device is missing/disconnected.

There was a problem when some devices were disconnected, they would report Missing device connection instead of Missing device registration and then SNMPv2 trap for missing device was not sent. This is now fixed.

Exigo 2.0.3.0

• Name: EXIGO-2.0.3.0
• Version: 2.0
• Date: 07.11.2025
• Status: General Available
• OT Cybersecurity certified: Yes

Software included in EXIGO-2.0.3.0.zip

Product	Version	Product description
Management and Upgrade Tools	EMT v2.0.3.0, Zenitel-IMT_3.7.3.1_20250502_1156	Exigo Management Tool and Intercom management tool - for device upgrade
Device software	vsft-PA.10.0.3.0	Firmware for imx28 based VSFT devices
Domain Controller Software	vsfx-ec-2.0.3.0	Firmware for ICX-500 Domain Controller
Flowire 3 Software	vsf-fcdc3-2.0.3.0	Firmware for Flowire 3
SNMP MIB Files	DEVICES-MIB: 202203070000Z, CONTROLLER-MIB: 201111301600Z	SNMP MIB files for Exigo Devices and Domain Controller

New Features

EC-1 Default NTP server

One NTP server (domain controller A) set as default NTP server for whole system

EC-4 Employ strong hashing algorithms

Software is using only SHA256 or stronger hashing algorithms

EC-7 Enforce strong passwords

Strong multi character and complex password enforced throughout whole system and software tools. ESC1 GUI requires 6 digit code

EC-9 Unsuccessful logon attempts

Failed logon attempts are logged and various human user component access is blocked after multiple failed login attempts

EC-10 Warning message for system use

Warning is displayed on web, GUI and tool for system and components about adverse effect of incorrect usage

EC-11 Allow only signed software executions

• Software upgrade verification and encrypted data transfer is enforced on all devices
• TFTP upgrades are not supported

EC-12 Session security

• All human user components have timed session locks after inactivity and possibility for manual logout
• EMT has 2 level access, administrator and operator

EC-13 Event logging and auditing

• All logs are locally timestamped by device
• Credentials and config changes are logged
• System related and security events are logged
• Domain controller A is default log server for whole system
• Whole system logs can be viewed and filtered on Domain Controller A WEB

EC-14 Information Confidentiality

• EMT database and communication with system is encrypted
• WEB access to any system component only available through HTTPs
• Complete system backups can be encrypted

EC-15 SNMP v3 support

SNMPv3 is supported with strong algorithms (SHA and AES)

EC-18 System improvements and fixes

• RTSP no longer supported on ESC1
• EMT uses Zenitel start menu folder
• IMT with Exigo only upgrade mode
• EXv2 stations support COs and relay in EMT
• ENA2100AC2 support

EC-37 Network security improvements

• Block all unused services in firewall by default
• Remove telnet support
• 802.1x remove MD5 support