v13.4.0

What's Changed 📦

It is highly recommended to update to this version!

Cybersecurity vulnerability (CVE-TBD) 🚨

This release fixes a high severity vulnerability. On Battery-Emulator installs with Auth enabled, it was possible for an attacker on the same network to bypass the need for auth and send battery commands that were accepted (BMSreboot/contactorsOpen/etc) despite the password protection. It was also possible for the attacker to crash the Battery-Emulator hardware by uploading files to memory without authentication.

Massive thanks to @marknisk for reporting this vulnerability 👏

General fixes 🔧

Apart from the cybersecurity improvement, this release has some general improvements and stability fixes. Please check out the full list of changes below before updating

Taking this release into use ⚙️

Important

In order to OTA update to this version, you already need to be on a v10 release!

Note that v10 was a major new release of the Battery-Emulator software. The first time when taking a version > v10.0.0 into use, you are required to perform an initial one time USB setup via this webpage! This is because we changed the flash frequencies, partitioning layouts and other under the hood changes to ensure longterm system stability. After any v10 has been installed via USB, following 10.X.X releases can be updated over the air.

Quickstart video: https://youtu.be/sR3t7j0R9Z0

Batteries 🔋

• BYD Vehicle: Improvement: Auto-detect Wh capacity, no longer require user to define it by @demon1300 in #3159
• BYD Vehicle: Feature: Show BMS charge time remaining by @demon1300 in #3170 & #3181
• Tesla Legacy (2012-2019): Safety ⚠️ Derive pack voltage limits from the detected series brick count by @hack-un in #3177
• Nissan LEAF: Fix battery heater event meanings, add EVENT_BATTERY_COLD by @nagyrobi in #3154
• CMFA: Decode more UDS polls, add them to More Battery Info page by @dalathegreat in #3173

Inverters ⚡

• Fronius: Fixed an issue where SOC% would appear incorrect on batteries larger than 58kWh by @demon1300 in #3164

Housekeeping

• Cybersecurity: Fix high severity CVE-TBD
• Optimization: Register /dump_can route once instead of 23x to save stack usage by @demon1300 in #3169

New Contributors

• @hack-un made their first contribution in #3177

Full Changelog: v13.3.0...v13.4.0