--------------------------------------------
   ProLink LoRaWAN EndNode Package release_notes.txt
   2026 IMST GmbH
--------------------------------------------


.1 Content:
----------------------------------------------------------------------------------------------------------
This file contains an overview about the most important feature updates and bugfixes.
A security notice and additional notes are included at the end of this document.
----------------------------------------------------------------------------------------------------------

.2 Supported Firmwares:
--------------------------------------------------------------------------
- ProLink LoRaWAN EndNode Modem EU868
- ProLink LoRaWAN EndNode Modem MBAND (US915 & AU915)
- ProLink LoRaWAN EndNode Modem AS923

.3 Revision History:
--------------------------------------------------------------------------
29.09.2026 - Release
    - ProLink LoRaWAN EndNode Modem EU868 V1.0 / Build Count 45 (iM891A-XL / iU891A-XL) included
    - ProLink LoRaWAN EndNode Modem EU868 V3.0 / Build Count 223 included
    - ProLink LoRaWAN EndNode Modem MBAND V3.0 / Build Count 223 included
    - ProLink LoRaWAN EndNode Modem AS923 V3.0 / Build Count 223 included
    - Security notice added

13.02.2025 - Release
    - ProLink LoRaWAN EndNode Modem EU868 V1.0 / Build Count 41 (iM891A-XL / iU891A-XL) added
    - ProLink_LoRaWAN_EndNode_Modem_HCI_Spec_Migration_Guide_iM891A-XL V1.0 added

15.01.2025 - Release
    - ProLink LoRaWAN EndNode Modem EU868 V3.0 / Build Count 219 included
    - ProLink LoRaWAN EndNode Modem MBAND V3.0 / Build Count 220 included
    - ProLink LoRaWAN EndNode Modem AS923 V3.0 / Build Count 219 included
    - ProLink_LoRaWAN_EndNode_Modem_HCI_Spec V2.4

12.05.2023 - Release
    - ProLink LoRaWAN EndNode Modem EU868 V3.0 / Build Count 207 included
    - ProLink LoRaWAN EndNode Modem MBAND V3.0 / Build Count 207 included
    - ProLink LoRaWAN EndNode Modem AS923 V3.0 / Build Count 207 included
    - ProLink_LoRaWAN_EndNode_Modem_HCI_Spec V2.3

14.07.2022 - Release
    - ProLink LoRaWAN EndNode Modem EU868 V3.0 / Build Count 203 included
    - ProLink LoRaWAN EndNode Modem MBAND V3.0 / Build Count 203 included
    - ProLink LoRaWAN EndNode Modem AS923 V3.0 / Build Count 203 included
    - ProLink_LoRaWAN_EndNode_Modem_HCI_Spec V2.2

27.01.2022 - Release
    - ProLink LoRaWAN EndNode Modem EU868 V3.0 / Build Count 197 included
    - ProLink LoRaWAN EndNode Modem MBAND V3.0 / Build Count 194 included
    - ProLink LoRaWAN EndNode Modem AS923 V3.0 / Build Count 196 included
    - ProLink_LoRaWAN_EndNode_Modem_HCI_Spec V2.0

22.12.2021 - Release
    - ProLink LoRaWAN EndNode Modem EU868 V3.0 / Build Count 194 included
    - ProLink LoRaWAN EndNode Modem MBAND V3.0 / Build Count 194 included
    - WiMOD_LoRaWAN_EndNode_Modem_HCI_Spec updated
    - ProLink_LoRaWAN_EndNode_Modem_HCI_Spec added

30.09.2021 - Release
    - ProLink LoRaWAN EndNode Modem EU868 V3.0 / Build Count 194 included
    - WiMOD_LoRaWAN_EndNode_Modem_HCI_Spec updated
    - ProLink_LoRaWAN_EndNode_Modem_HCI_Spec added	

28.05.2020 - Release
    - WiMOD LoRaWAN EndNode Modem EU868 V2.0 / Build Count 167 included
    - WiMOD LoRaWAN EndNode Modem US915 V2.0 / Build Count 167 included
    - WiMOD LoRaWAN EndNode Modem IN856 V2.0 / Build Count 167 included
    - WiMOD LoRaWAN EndNode Modem AS923 V2.0 / Build Count 167 included
    - WiMOD_LoRaWAN_EndNode_Modem_HCI_Spec updated
    - WiMOD_LoRaWAN_EndNode_Modem_Feature_Spec updated

12.09.2019 - Release
    - WiMOD LoRaWAN EndNode Modem EU868 V2.0 / Build Count 159 included
    - WiMOD LoRaWAN EndNode Modem US915 V2.0 / Build Count 159 included
    - WiMOD LoRaWAN EndNode Modem IN856 V2.0 / Build Count 159 included
    - WiMOD LoRaWAN EndNode Modem AS923 V2.0 / Build Count 159 included
    - WiMOD_LoRaWAN_EndNode_Modem_HCI_Spec updated
    - WiMOD_LoRaWAN_EndNode_Modem_Feature_Spec updated

16.01.2019 - Release
    - WiMOD LoRaWAN EndNode Modem IN856 V2.0 / Build Count 153 included

28.02.2018 - Release
    - WiMOD LoRaWAN EndNode Modem US915 V2.0 / Build Count 142 included
    - WiMOD_LoRaWAN_EndNode_Modem_Feature_Spec updated
    - WiMOD_LoRaWAN_EndNode_Modem_HCI_Spec updated

06.02.2018 - Release
    - WiMOD LoRaWAN EndNode Modem EU868 V2.0 / Build Count 137 included


.4 Security Notice:
--------------------------------------------------------------------------
A security vulnerability has been identified in the proprietary wireless communication protocol used by this firmware. This issue does not affect th integrated LoRaWAN protocol. Under certain conditions, an attacker within radio communication range may capture and replay previously transmitted messages, potentially resulting in unauthorized command execution or disruption of normal system operation.

The issue is caused by the absence of replay protection at the protocol level. The current protocol behavior has been retained to preserve backward compatibility with existing customer deployments. All publicly released firmware versions are affected by this vulnerability.

.5 Recommended Mitigations:
--------------------------------------------------------------------------
Where replay protection is required, customers should consider implementing application-level protection mechanisms. This may include adding an application-specific frame counter (or sequence number) together with an Message Authentication Code (MAC) to the application payload. These measures enable the receiver to verify both the authenticity and freshness of received messages and effectively prevent replay attacks.

Furthermore, when using the proprietary link without the aforementioned modifications, it is recommended to reduce the distance between the two participants to just a few meters. This is achieved by using very low transmission power, thereby making replay attacks less likely.

.6 Additional Note Regarding AES Counter Mode:
--------------------------------------------------------------------------
The use of the optional AES counter mode is not affected by this vulnerability and remains fully supported. The counter value is transmitted as part of the message and is not considered secret. The counter is reset to zero after each device reset or power cycle.