Release Notes
Xerus Firmware 3.6.1

Date: September 3, 2020
Version: Xerus 3.6.1 / Build 46982 / Release Notes, Version 6
Release Status: General Availability (GA) for select Xerus based products

Release Overview
Xerus™ Firmware 3.6.1 is a critical security release addressing SNMP-based vulnerabilities. All customers withXerus based products are recommended to upgrade to this release.

Applicability
This firmware release is applicable to the following product brands and models.
ProductPDU

Applicable Brand: Model
Raritan: PXE, PX2, PX3, PXC, PXO, PX3TSLegrand: Switched and Metered Models

Smart Rack Controller

Raritan: EMX2, SRC

Branch Circuit Monitoring

Raritan: BCM2

General Guidelines for this Release
Some custom engineered models will not be supported by this release. Please check the Not Supported inThis Release section below. Or, contact Raritan Support if you are unsure of the model number of your unit;
it is typically viewable from the GUI Device Information page, and is printed on a label on the side of the PDU.
Note: In accordance with California Senate Bill 327, Xerus Firmware has updated its default password policy.
Note: Do NOT upgrade ANY other Raritan PX model(s) to Xerus 3.6.1 (other than what’s listed in the tableabove) because the unit may have been built after this release entered our System Tests and it may result inthe unit becoming non-functional.
Note: Do NOT downgrade your new Xerus based products to any prior release. Due to significant internal
enhancements in Xerus 3.6.1, a downgrade from the Release 3.6.1 Build 46982 to ANY prior release is NOTSUPPORTED. Please contact Raritan Support with any questions.
Note: Only Power IQ® (DCIM software from Sunbrid®) v6.0 and higher are supported with Xerus 3.6.1.

Xerus Firmware Release Notes1

Release Highlights
Security Fixes & Updates
Issue ID

Description75673

Fixed an issue where certain requests caused SNMPv3 network services to hang andmay allow for unauthenticated access

74708

Fixed an SNMP-based buffer overflow error triggered by processing "getnext"

Please consult the appropriate User Guide for more information on these firmware features at
Raritan.com/support.

Not Supported with Xerus 3.6.1
Except for some recent Engineered to Order (ETO) models, all units/models that can run Xerus Firmware can beupgraded to this release.
Power IQ & New Hardware Support:•DX2-DH2C2 (SmartLock Door Handle Controller) is compatible with Power IQ release 6.1.1 and later

Unsupported Accessory Configurations:•

AMS-M2-Z (Modular AMS Strip) Hot Plugging – These asset management accessories cannot be hot
plugged and doing so may result in a controller re-boot or the need to re-boot (power down) the entire
PDU.

Default System Passwords:•In accordance with California Senate Bill 327, Xerus Firmware has updated its default password policy.
Passwords must now be manually set on all new units running Xerus 3.6.0 (and later) or devices that arerunning Xerus 3.6.0 (and later) and have been factory reset.

EMX2 Internal Sensor Availability:•Upgrading EMX to Xerus 3.6.1 may require reboot to re-enable all internal sensor functionality. When
doing so, external sensors and peripheral devices are not impacted.

If you are unsure that your model is supported by this firmware or you have any questions about unsupported
configurations, please contact your regional support team at Raritan.com/support.

Xerus Firmware Release Notes

2

Upgrade Matrix (Path for Upgrades)
This release is intended for factory shipments and firmware upgrades on the series/models stated in the tableabove.
Please Note: Due to file system changes in Xerus 3.6.1 and previous releases, the following upgrade paths
need to be followed or the Xerus-enabled device may become inoperable and require manual recovery.
Firmware Version

Upgrade Steps

3.0.x, 3.1.x, 3.2.x» 3.4.0 » 3.5.0 » 3.6.0 » 3.6.1

3.3.x, 3.4.x» 3.5.0 » 3.6.0 » 3.6.1

3.5.x» 3.6.0 » 3.6.1

3.6.x» 3.6.1

Historical firmware version downloads can be found on Raritan.com/support.

Raritan PX Downloads:
The following supplemental files can be downloaded at Raritan.com/support (please select the correct product):•

Firmware Files and Release Notes•

Product Documentation and User Guides•

SNMP MIBs•

Related Tools and Drivers•

JSON-RPC SDK

Release Package Details:
The Xerus 3.6.1 release package has the following components. It is a GA release and will be posted on theRaritan website at Raritan.com/support. Please note that the firmware file for the EMX2 model is different than thePXE, PX2, PX3, PX3TS, and BCM2 models.
Xerus 3.6.1 Package components for PXE, PXC PXO, PX2, PX3, PX3TS, SRC, BCM2 & LegrandSwitched/Metered Products:•“'Xerus_ReleaseNotes_3.6.1.pdf” (this file)•

A firmware release (binary): pdu-px2-030601-46982.bin

Xerus 3.6.1 Package Components for EMX2:•“'Xerus_ReleaseNotes_3.6.1.pdf” (this file)•A firmware release (binary): emx-ecx-030601-46982.binXerus Firmware Release Notes

3

General Upgrade Instructions:(standalone upgrade from the browser-based user interface)•Enable JavaScript in your browser before logging into the unit to start the upgrade process.

•Follow instructions in the appropriate device User Guide. Please read the entire upgrade instructions
before starting an upgrade.

•If you have any questions, or cannot follow the instructions in the User Guide, please STOP and contact
Raritan Support for further instructions or to submit a support ticket.

Contact UsPlease go to Raritan.com/support for contact options.

Xerus Firmware Release Notes4