Firmware version for Hub2

[#1]

I am sorry if I am being thick here and I know there is a Pinned topic with the current firmware versions for the plusnet routers... but is it really up to date?  It appears that the last update was 2 years ago... is this still current?

PN Hub Latest Firmware Versions

‎01-04-2022 11:22 AM - edited ‎19-06-2023 10:38 AM

Hub Zero:  7.275.17 

Hub 1: 4.7.5.1.83.8.289.1.3

Hub 2: 0.10.00.04201-PN

[#2]

Hub Zero:  7.275.17 

Hub 1: 4.7.5.1.83.8.289.1.3

Hub 2: 0.10.00.04201-PN

[#3]

@Ian06 

There’s an old saying: If it’s not broken, don’t fix it.

This is a mature product. The post is up to date.

Most regular updates of products just add bells and whistles that few people want or use. The Hub 2 isn’t perfect but does the job for the vast majority of users.

[#4]

My impression is that most firmware updates for routers etc are to fix recently discovered security issues not adding bells and whistles.

[#5]

@Baldrick1 - thanks for confirming.  I agree there aren't many bells and whistles to worry about on the Hub2 and you can always use your own router if you really need them.

As @MartinGoose says I was more concerned to be sure I have all the latest security patches, it seems there are vulnerabilities being discovered all the time (not specifically in Plusnet Hub2) - I guess with few bells and whistles there is little to find vulnerabilities in or fix.

It just seemed like 2 years was a long time for there to be no updates...

[#6]

Agreed that insecure firmware is the issue. It would be useful to know:

1. Which chipset is used in the Hub 2?

2. Does the Hub 2 use template software supplied by the chipset manufacturer?

We can then pay attention to any discovered insecurities which are unlikely to mention the Plusnet Hub 2 by name. See, for example:

https://routersecurity.org/bugs.php 

[#7]

Beneath the hood the Plusnet Hub 2 is a BT Smarthub 2 with tweeked firmware. For detailed info on the hardware you might be better looking at that.

I no longer use a Hub 2, but when I had one none of the updates were triggered by, or addressing, security concerns.

Plusnet are happy for customers to use their own routers if preferred.

[#8]

BT are just as obscure about the hardware in a BT Smarthub 2 as Plusnet are!

Interesting that "when I had one none of the updates were triggered by, or addressing, security concerns". Do Plusnet email all their customers about an update to their router with details of the changes? Surprising. ISPs usually want to keep this hidden so as not to generate support questions.

[#9]

@MartinGoose 

These are the dates the Hub Two I used were last received.

Firmware version: v0.10.00.04201-PN updated: 30-Jun-2023

Firmware version: v0.08.00.08297-PN updated: 31-Oct-2022

Firmware version: v0.06.00.12134-PN updated: 16-May-2022

Delivery Firmware version: v0.05.03.07154-PN updated: Unknown

From a friend (Gemini AI)  I have found they use broadcom chipset

CPU: Broadcom BCM63138 (a 1 GHz dual-core ARM Cortex A9 processor)

Wi-Fi: Broadcom BCM4366 (for 5GHz 802.11ac) and Broadcom BCM43602 (for 2.4GHz 802.11bgn)

One of the update was to resolve an issue with  Bridge Mode with an ADSL connection,

I would image after this time if both the BT and plusnet versions had any vulnerabilities it would have been flagged.

[#10]

---

@MartinGoose wrote:

BT are just as obscure about the hardware in a BT Smarthub 2 as Plusnet are!

---

"Security through obscurity" isn't good practice these days. Once a vulnerability is identified bots can test millions of devices each day for the weakness.

[#11]

In some respects the firmware/software on the Hub2 is not perfect. It certainly doesn't conform to all of IPv4 subnetting. Which is 'interesting'. Whether that classifies as being 'broken' is open to interpretation.