Skip to Content

N870(E)/N770/N670/N610 - Release 2.71.1

Release Date

  • October 2026

Information

Following a recent security advisory regarding critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619), we recommend updating all affected Gigaset DECT IP PRO systems to firmware version 2.71.1

What is new?

  • Unauthenticated Remote Code Execution in Embedded PHP Runtime ("php2shell", CVE-2026-109618 / CVE-2026-109619) on Gigaset Nx70 IP PRO Device
  • Web-interface:
    • A new - Mobile device status page
      • Battery level
      • In/out of Charger
      • Provisioning status
        • "Provisioned: <X time> ago"
        • "Scheduled: <X time> ago"
        • "Internal error"
        • "Invalid URL"
        • "File download failed"
        • "Invalid file"
        • "Resource download failed"
        • "Battery too low"
        • "Cancelled by user"
        • "Feature not supported" <- shown if mobile device does not support provisioning at all
        • "Mobile device was offline" <- shown if mobile device was offline at the time of the trigger (shown even with older HS FW)
        • "XML file too big"
      • SUOTA status
        • "Firmware up to date" <- shown if HS FW is equal/newer than matching SUOTA package (shown even with older HS FW)
        • "Update available" <- shown if HS FW is older than matching SUOTA package (shown even with older HS FW)
        • "Scheduled: <X time> ago"
        • "Internal error"
        • "File download failed"
        • "Invalid file"
        • "Battery too low"
        • "Cancelled by user"
        • "Feature not supported" <- shown if mobile device does not support SUOTA at all
        • "Mobile device was offline" <- shown if mobile device was offline at the time of the trigger (shown even with older HS FW)
    • Start easy provisioning

    • Mobile Devices Search - add SUOTA window, provisioning, PTT

  • CrewPTT

  • Improvements

  • Data Act requirements
    • Web-interface: STATUS - Statistics, new  Support page
      • Customer support with link to the wiki
      • Information - License terms
      • Data protection and information security with option to download device data

  • Bugfixes

  • Outgoing call start to wrong server
  • Base/DM Web UI is not accessible when plain-text password is set via provisioning
  • General improvements

  • DHCP 66: %MACD in provisioning URL not working

Downloads

Firmware file DECT systemFile size (KB)MD5Download link
N610/N670/N770/N87049.3013f2c09f3273edeb865eea271d80e1d0aGigasetNx70-V2.71.1.bin
Virtual Integrator
VI: VM Sphere ESXi (5.5, 6.0 and 6.5) or VMware workstation 14 Player (zip file)722.244b69854de28772430a034816bcaac2baaGigaset-VI-V2.71.1-build.99fe7e9.zip
VI: Oracle VM VirtualBox (ova file)728.148d6cc0ae55bbcb7b193f0af5b56a4e5c6Gigaset-VI-V2.71.1-build.99fe7e9.ova
VI: Hyper-V723.803738cd740651bf8338ca8c8d733fcc60bGigaset-VI-V2.71.1-build.99fe7e9.HyperV.zip
VI: Upgrade an existing VI system104.5212ffd62cc1130534e8d6bb83c068410c2Gigaset-VI-V2.71.1-build.99fe7e9.update.bin
For testing upgrade/downgrade   
N610/N670/N770/N870 fake software image (for testing upgrade)49.381aebe5ea557d39d954d82ee74ff209a22Gigaset-Nx70-V999.71.1-build.99fe7e9.bin
VI: fake software image (for testing upgrade)104.5211b40e409d1f5513021a485434bd22129Gigaset-VI-V999.71.1-build-99fe7e9.update.bin