FIRMWARE RELEASE NOTE ====================== Products affected: Q1645/-LE Release date: 2022-10-10 Release type: Production Firmware version: 8.40.4.7 Preceding release: 8.40.4.6 -------------------------------------------------------------------------------- This is the LTS-2018 track. Upgrade instructions ==================== Upgrade the firmware according to the instructions given at https://www.axis.com/ca/en/support/technical-notes/how-to-upgrade or howtoupgrade.txt, which is included in the firmware folder. NOTE ==================== For latest information about Axis Cybersecurity, see https://www.axis.com/se/sv/support/product-security. Corrections in 8.40.4.7 since 8.40.4.6 ======================================= 8.40.4.7:C01 General improvements to the LTS-2018 platform. 8.40.4.7:C02 Updated OpenSSL to version 1.1.1q to increase the overall cybersecurity 8.40.4.7:C03 Corrected an issue that caused Audio via external VMS to stop working. 8.40.4.7:C04 Updated curl to version 7.85.0 to increase overall cybersecurity level. Corrections in 8.40.4.6 since 8.40.4.5 ======================================= 8.40.4.6:C01 General improvements to the LTS-2018 platform. 8.40.4.6:C02 Corrected an issue where 802.1X would not trust the intermediate certificate authority (CA). 8.40.4.6:C03 Updated cURL to version 7.83.1 to increase the overall cybersecurity level. 8.40.4.6:C04 Upgraded Apache to version 2.4.54 to increase overall cybersecurity level. 8.40.4.6:C05 Corrected an issue where the time tooltip was not displaying correct date after passing midnight. Also the date in the recordings list and the export was sometimes 1 day off. 8.40.4.6:C06 Corrected an issue that caused timeout while reading boot block parameters. 8.40.4.6:C07 Updated OpenSSL to version 1.1.1p to increase the overall cybersecurity level. Corrections in 8.40.4.5 since 8.40.4.4 ======================================= 8.40.4.5:C01 General improvements to the LTS-2018 platform. 8.40.4.5:C02 Corrected CVE-2018-25032. 8.40.4.5:C03 Improved memory management in the network services daemon. 8.40.4.5:C04 Updated OpenSSL to version 1.1.1o to increase the overall cybersecurity level. 8.40.4.5:C05 Corrected an issue that caused the Send images event to stop uploading towards a FTP server when the filename included a space (" "). 8.40.4.5:C06 Updated wpa-supplicant to version 2.10 to increase overall minimum cybersecurity level. 8.40.4.5:C07 Receiving ICMP redirects from other network hosts are now disabled to increase overall minimum cybersecurity level. 8.40.4.5:C08 Upgraded Apache to version 2.4.53 to increase overall cybersecurity level. Corrections in 8.40.4.4 since 8.40.4.3 ======================================= 8.40.4.4:C01 General improvements to the LTS-2018 platform. 8.40.4.4:C02 Corrected an issue that prevented firmware upgrade from LTS-2016. 8.40.4.4:C03 Corrected an issue that could cause 'transmit.cgi' to close connection prematurely when transmitting audio to the camera. 8.40.4.4:C04 Updated OpenSSL to version 1.1.1m to increase the overall cybersecurity level. 8.40.4.4:C05 Improved handling of empty recordings. 8.40.4.4:C06 Upgraded Curl to version 7.79.1 to increase overall cybersecurity level. 8.40.4.4:C07 Upgraded Apache to version 2.4.52 to increase overall cybersecurity level. 8.40.4.4:C08 The Remote Syslog configuration is now preserved during a firmware update within the same firmware track. Corrections in 8.40.4.3 since 8.40.4.2 ======================================= 8.40.4.3:C01 General improvements to the LTS-2018 platform. 8.40.4.3:C02 Corrected an issue that did not account for MTU packet fragmentation for IEEE 802.1x authentication. Previously the Axis device was not able to authenticate properly against an 802.1x network when the MTU was configured to 1410 or lower. 8.40.4.3:C03 Corrected CVE-2021-27219. 8.40.4.3:C04 Corrected CVE-2021-31987. 8.40.4.3:C05 Corrected CVE-2021-27218. 8.40.4.3:C06 Corrected CVE-2019-12450. 8.40.4.3:C07 Corrected an issue that in combination with some VMSes and low resolution could cause brief disconnections in the video stream. 8.40.4.3:C08 Corrected an issue that interrupted the NTP-time-sync between the Axis device and NTP- server when the NTP-server was operating instable and suffered fluctuating time-changes. 8.40.4.3:C09 Corrected an issue that could cause an RTSP stream to stop after 60+ seconds if streamed to an openRTSP client. 8.40.4.3:C10 Updated Apache to version 2.4.48 to increase overall cybersecurity level. 8.40.4.3:C11 Updated OpenSSH to version 8.6p1 to increase the overall minimum cybersecurity level. 8.40.4.3:C12 Updated OpenSSL to version 1.1.1l to increase overall cyber security level. 8.40.4.3:C13 Corrected CVE-2021-31986. 8.40.4.3:C14 Corrected nice names for the PreventDoSAttack parameters in Settings -> System -> Plain Config-> System -> PreventDoSAttack. 8.40.4.3:C15 Extended the 802.1x EAP-Identity field character limit from 32 to 128 characters. 8.40.4.3:C16 Improved memory management in the DHCP lease update daemon. 8.40.4.3:C17 Corrected an issue that prevented streaming in "always-multicast mode" on rare occasions. 8.40.4.3:C18 Corrected CVE-2021-31988. 8.40.4.3:C19 Corrected an issue that prevented the Axis device to respond with "HTTP 403 Forbidden" when the source-ip address was blocked when using PreventDOSAttack in Plain Config -> System. Previously "HTTP 401 Unauthorized" was returned. 8.40.4.3:C20 Improved memory management in the network services daemon. 8.40.4.3:C21 Updated curl to version 7.78.0 to increase overall cybersecurity level. Corrections in 8.40.4.2 since 8.40.4.1 ======================================= 8.40.4.2:C01 General improvements to the LTS-2018 platform. 8.40.4.2:C02 Corrected an issue that caused IEEE 802.1x network authentication to fail sometimes after unexpected reboots. 8.40.4.2:C03 Improved Link Layer Discovery Protocol (LLDP) system stability. 8.40.4.2:C04 Corrected an issue that caused the value of Quality of Service (QoS) to not be respected in always multicast mode. 8.40.4.2:C05 Corrected an issue that could cause live image to blink in dark conditions on rare occasions. 8.40.4.2:C06 Updated curl to version 7.73.0 to increase overall cybersecurity level. 8.40.4.2:C07 Corrected an issue that caused PKCS#12-formatted certificate uploads to fail when certain special characters were used as a password. 8.40.4.2:C08 Corrected an issue in oak.cgi that could cause invalid requests. 8.40.4.2:C09 Updated OpenSSL to version 1.1.1k to fix CVE-2021-3449 and CVE-2021-3450. 8.40.4.2:C10 Corrected an issue that prevented the device to utilize the available network bandwidth in high-latency networks such as 4G cellular network. 8.40.4.2:C11 Corrected an issue with pause-frame handling that could cause network disconnections if pause-frames were enabled and used in the network. 8.40.4.2:C12 Added support for health monitoring using Axis Micron SD card. Corrections in 8.40.4.1 since 8.40.4 ===================================== 8.40.4.1:C01 General improvements to the LTS-2018 platform. 8.40.4.1:C02 Reduced time to built-up an RTSP video stream by 30% and more. 8.40.4.1:C03 Added support for HTTP Strict Transport Security (HSTS) when using HTTPS. 8.40.4.1:C04 Updated Apache to version 2.4.46 to increase overall cyber security level. 8.40.4.1:C05 Corrected an issue that caused an error message to pop-up when pressing the test button of an event using HTTP recipients. Corrections in 8.40.4 since 8.40.3.3 ===================================== 8.40.4:C01 General improvements to the LTS 2018 platform. 8.40.4:C02 Corrected an issue that caused old recordings to not be removed after their retention period was expired. 8.40.4:C03 Updated curl to version 7.69.1 to increase overall cybersecurity level. 8.40.4:C04 Corrected a streaming issue to handle timestamps correctly after a RTSP:PAUSE/RESUME event. This could cause gaps in recordings when using Axis Media Control (AMC). 8.40.4:C05 Disabled the HTTP Options method in the Apache webserver replies to increase overall cyber security level. 8.40.4:C06 Added possibility to retrieve the device Owner Authentication Key (OAK) in the web GUI. Note that this functionality requires that the product have direct access to the internet. 8.40.4:C07 Updated OpenSSL to version 1.1.1g to increase overall cybersecurity level. 8.40.4:C08 Updated Apache to version 2.4.43 to increase overall cybersecurity level. Corrections in 8.40.3.3 since 8.40.3.2 ======================================= 8.40.3.3:C01 General improvements to the 2018 LTS platform. 8.40.3.3:C02 Added ProxyDispatcherOnly option to the O3C/AVHS client that can control proxy configurations of dispatcher services. 8.40.3.3:C03 Corrected an issue that on some occasions could cause an H.264 stream to stall after a while if viewed in the browser. 8.40.3.3:C04 Corrected ONVIF response for WSPullPointSupport. Corrections in 8.40.3.2 since 8.40.3.1 ======================================= 8.40.3.2:C01 General improvements to the 2018 LTS platform. 8.40.3.2:C02 Corrected Vendor class identifier for DHCP negotiation. 8.40.3.2:C03 Updated curl to version 7.68.0 to increase the minimum cybersecurity level. 8.40.3.2:C04 Corrected an issue that prevented the device from resolving DNS hostnames when used in combination with SNMP. 8.40.3.2:C05 Added the option to disable Web-Service Discovery (WS-Discovery) protocol in Plain Config. 8.40.3.2:C06 Corrected an issue that caused the test recipient button in the Web GUI to not work properly when setting up an event mail recipient. 8.40.3.2:C07 Corrected an issue that caused multicast redirection to fail on rare occasions. 8.40.3.2:C08 Updated Linux kernel to version 4.9.197 to increase the minimum cybersecurity level. 8.40.3.2:C09 Corrected an issue that prevented the user from exporting recordings when the product was configured to Alaska timezone. 8.40.3.2:C10 Corrected an issue that caused loss of focus after a reboot using iCS lenses at 100/120 FPS. 8.40.3.2:C11 Corrected an issue that caused the EAP-START package not to be sent during IEEE 802.1x port authentication upon network link state change. 8.40.3.2:C12 Updated wpa-supplicant to version 2.9 and hostapd to version 2.9 to increase overall minimum cyber security level. Corrections for the following security vulnerabilities are included: CVE-2019-13377 CVE-2019-16275. 8.40.3.2:C13 Corrected a streaming issue affecting RTSP tunneled via HTTPs. Corrections in 8.40.3.1 since 8.40.3 ===================================== 8.40.3.1:C01 General improvements to the 2018 LTS platform. 8.40.3.1:C02 Corrected an issue that caused playback from a SD card of recorded MKV files with audio to fail on rare occasions. 8.40.3.1:C03 Corrected an issue with the resolution on the ONVIF command getstatus (PTZ). 8.40.3.1:C04 Corrected an issue that caused a reboot of the camera to start an ACAP even though STARTMODE=never was set in its configuration. 8.40.3.1:C05 Corrected an issue that caused audio not to be included in video clips when audio encoding G711 Mulaw was enabled. 8.40.3.1:C06 Corrected an issue that made it possible to add an action rule recipient without nice-name via API. 8.40.3.1:C07 Updated OpenSSL to version 1.1.1d to increase overall minimum cyber security level. 8.40.3.1:C08 Corrected an issue that caused param.cgi to show password in plain text when listing a specified ACAP parameter. 8.40.3.1:C09 Corrected a streaming issue that caused the RTSP server to omit the RTP-info header on rare occasions. 8.40.3.1:C10 Corrected an issue that caused time in recording list to be incorrect for America/Caracas, Africa/Cairo and Asia/Baku. 8.40.3.1:C11 Updated Apache to version 2.4.41 to increase overall minimum cyber security level. 8.40.3.1:C12 Corrected an issue that caused fan status not to be reported correctly via SNMP. 8.40.3.1:C13 Corrected an issue that caused parameter hidden:on_off in the Axis ACAP SDK to not work properly. 8.40.3.1:C14 Corrected an issue that caused a log in pop-up to appear in the WebGUI after a factory default even though no users had been configured yet. 8.40.3.1:C15 Added support for health status from Western Digital SD-cards. 8.40.3.1:C16 Corrected an issue that caused the capture_open_stream API in the Axis ACAP SDK to not work properly. Corrections in 8.40.3 since 8.40.2.2 ===================================== 8.40.3:C01 General minor improvements to the 8.40 LTS platform. 8.40.3:C02 Removed the root users default password in factory defaulted firmware. The password of the root user must be set first in order to initialize VAPIX and ONVIF interfaces to allow further configuration. This change only affects products in its factory defaulted state, products that are already deployed in production systems are not affected by this update until factory defaulted. 8.40.3:C03 Update libssh2 to version 1.9.0 to increase overall minimum cyber security level. This update includes correction for CVE-2019-13115. Corrections in 8.40.2.2 since 8.40.2.1 ======================================= 8.40.2.2:C01 General minor improvements to the 8.40 LTS platform. 8.40.2.2:C02 Corrected the following kernel vulnerabilities to increase overall minimum cyber security level (collectively known as "TCP SACK PANIC"): CVE-2019-11477, CVE-2019-11478, CVE-2019-11479. 8.40.2.2:C03 Updated wpa-supplicant to version 2.8 and hostapd to version 2.8 to increase overall minimum cyber security level. The following security vulnerabilites are included (collectively known as "Dragonblood"): CVE-2019-9494, CVE-2019-9495, CVE-2019-9496, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499. 8.40.2.2:C04 Corrected an issue that caused problems accessing devices via O3C/Axis Guardian using Microsoft Edge browser. 8.40.2.2:C05 Improved the certificate management system: It is now possible to upload PKCS#12 certificates with a total size of 102400 bytes. The previous limit was 1/10 of it. 8.40.2.2:C06 Corrected an issue that caused some users not to be displayed in the webGUI's user list on rare occasions. 8.40.2.2:C07 Improved the certificate management system: added support for certificate IDs with long names. 8.40.2.2:C08 Updated openSSL to version 1.1.1c to increase overall minimum cyber security level. 8.40.2.2:C09 Added support for TLSv1.3. 8.40.2.2:C10 Corrected security vulnerability in Systemd CVE-2019-6454 to increase overall minimum cyber security level. 8.40.2.2:C11 Improved the certificate management system: added system log information for failing certificate upload. 8.40.2.2:C12 Corrected an issue that caused SMB connection problems to NetApp NAS configured for SMBv2. 8.40.2.2:C13 Corrected an issue that caused cropped image streams not to be shown correctly on rare occasions. 8.40.2.2:C14 Updated libssh2 to version 1.8.2 due to that version 1.8.1 broke publickey-userauth requests. 8.40.2.2:C15 Corrected an issue that caused view areas, set in the web GUI, not to be preserved after changing camera resolution. Corrections in 8.40.2.1 since 8.40.2 ===================================== 8.40.2.1:C01 General minor improvements to the 8.40 LTS platform. 8.40.2.1:C02 Updated Apache to version 2.4.39 to increase overall minimum cyber security level. 8.40.2.1:C03 Improved robustness of the O3C client. 8.40.2.1:C04 Updated OpenSSL to version 1.1.1b to increase overall minimum cyber security level. 8.40.2.1:C05 Updated OpenSSH to version 7.9p to increase overall minimum cyber security level. 8.40.2.1:C06 Corrected an issue when changing resolution while cropping a streamed image with the VAPIX parameter croppos. 8.40.2.1:C07 Added information about Certificate ID to the Installed Certificates section in the server report. Corrections in 8.40.2 since 8.40.1.2 ===================================== 8.40.2:C01 General minor improvements to the 8.40 LTS platform. 8.40.2:C02 Added information about WI-FI networks within range to the server report. 8.40.2:C03 Corrected the following security vulnerabilities to increase overall minimum cyber security level: CVE-2019-3855, CVE-2019-3856, CVE-2019-3857, CVE-2019-3858, CVE-2019-3859, CVE-2019-3860, CVE-2019-3861, CVE-2019-3862, CVE-2019-3863. 8.40.2:C04 Corrected security vulnerability CVE-2019-0217 in Apache to increase overall minimum cyber security level. 8.40.2:C05 Corrected security vulnerability CVE-2017-16544 in BusyBox to increase overall minimum cyber security level. 8.40.2:C06 Corrected an issue that caused a viewer user to not be able to obtain the list of image resolution properties via param.cgi. 8.40.2:C07 Corrected an issue in the Web-GUI that prevented to upload a Client Certificate or CA certificate using the Edge browser. 8.40.2:C08 Updated pre-installed Mozilla CA-certificates to versions available at 20190122. 8.40.2:C09 Added GOP Length option to the Stream Profile Settings. 8.40.2:C10 Corrected the following vulnerabilities in order to increase overall minimum cybersecurity level: CVE-2018-16864, CVE-2018-16865, CVE-2018-16866. 8.40.2:C11 Updated OpenSSL to version 1.0.2r to increase overall minimum cyber security level. 8.40.2:C12 Corrected an issue with timestamps in the RTCP Sender Report that could cause RTSP recordings/playbacks not to work correctly in some video players using the Live555 library such as VLC and ffmpeg. Corrections in 8.40.1.2 since 8.40.1.1 ======================================= 8.40.1.2:C01 General minor improvements to the 8.40 LTS platform. 8.40.1.2:C02 Corrected an issue in the web GUI when creating a preset position and the language was set to German. 8.40.1.2:C03 Corrected an issue that could cause the camera to get unresponsive when two clients are streaming over multicast using the same streaming parameters. 8.40.1.2:C04 Upgraded Apache to version 2.4.38 to increase overall minimum cyber security level. 8.40.1.2:C05 Updated label for P-Iris lenses from CBC to Computar in the iris drop down list. 8.40.1.2:C06 Corrected an issue with Always Multicast over IPv6. 8.40.1.2:C07 Corrected an issue that caused factory default settings to not be applied correctly when upgrading from a firmware version prior to 6.20. 8.40.1.2:C08 Corrected an issue in the web GUI that caused IO Port values to be displayed incorrectly. 8.40.1.2:C09 Corrected an issue that caused Recorded Guard Tour not to work properly on rare occasions. 8.40.1.2:C10 Improved re-connection behavior to AVHS server. The time between failed connection attempts will now gradually increase until a hard limit is reached. 8.40.1.2:C11 Corrected an issue that could cause corrupted overlays when using BMP images as overlay. 8.40.1.2:C12 Corrected an issue that prevented usage of the same port for two different multicast streams. 8.40.1.2:C13 Corrected an issue that caused IR cut filter to not work properly when Synchronize IR Illumination was turned off. 8.40.1.2:C14 Corrected an issue that could cause foggy snapshot images on rare occasions. 8.40.1.2:C15 Corrected an issue when cropping a streamed image with the VAPIX parameter croppos. 8.40.1.2:C16 Improved list.cgi to display all installed applications (no longer limited to 8). 8.40.1.2:C17 Corrected an issue with pre-installed applications using startmode set to "never". 8.40.1.2:C18 Corrected an issue that could cause an incorrect error message when testing HTTP recipient. 8.40.1.2:C19 Corrected an issue that could cause corrupted video recordings when UserData or TriggerData are enabled. 8.40.1.2:C20 Improved stability in the httptest.cgi. 8.40.1.2:C21 Corrected an issue that caused an HTTP-recipient based action rule to fail when the response from the server excluded the textual phrase (Example: HTTP 200). This will work now. 8.40.1.2:C22 Added Firmware Recovery (Firmware Rollback) information to the server report. Corrections in 8.40.1.1 since 8.40.1 ===================================== 8.40.1.1:C01 Corrected an issue that produced corrupted JPEG file data while the image itself was good. 8.40.1.1:C02 Corrected an issue that prevented the user from uploading a certificate that contains "Bag Attributes" before and after the actual certificate content. 8.40.1.1:C03 Corrected an issue that prevented the user from receiving the correct recording list in AXIS Companion in combination with view areas or multi-sensor products. 8.40.1.1:C04 Corrected an issue in the ACAP framework that could cause ACAPs to freeze on rare occasions. 8.40.1.1:C05 Patched the following security vulnerabilities to increase overall minimum cyber security level: CVE-2018-10876, CVE-2018-10877, CVE-2018-10878, CVE-2018-10879, CVE-2018-10880, CVE-2018-10881, CVE-2018-10882, CVE-2018-10883. 8.40.1.1:C06 Updated to OpenSSL version 1.0.2p to increase overall minimum cyber security level. 8.40.1.1:C07 Updated Apache to version 2.4.35 to increase overall minimum cyber security level. 8.40.1.1:C08 Patched security vulernability CVE-2018-17182 to increase overall minimum cyber security level. 8.40.1.1:C09 Corrected an issue that caused upload of Axis People Counter via curl to fail in rare occations. 8.40.1.1:C10 Corrected an issue that could cause incorrect snapshot resolutions on view areas. New features in 8.40.1 ================================================================================ 8.40.1:F1 Renamed "Browser Stream Statistics" to "Client Stream Information". The Client Stream Information are available in the web-interface of the camera. 8.40.1:F2 Added support for ONVIF Audio Backchannel. 8.40.1:F3 Updated apache webserver to version 2.4.33 to increase overall minimum cyber security level. 8.40.1:F4 AXIS Video Motion Detection 4.2.5 is now pre-installed. 8.40.1:F5 AXIS Motion Guard and Fence Guard 2.1.4 are now pre-installed. 8.40.1:F6 AXIS Loitering Guard 2.1.4 is now pre-installed. 8.40.1:F7 Updated help files with more detailed information about SMB and Certificate support in AXIS products. 8.40.1:F8 Added a new section "Snapshot of current CPU utilization" that prints information about CPU utilization and memory consumption of processes in the server report. 8.40.1:F9 Changed the default timeout of HTTP-Recipient based action rules from 10s to 120s to compensate for unstable networks or slow clients. After the timeout is reached, the action rule will be re-tried. 8.40.1:F10 Modified the access rights for serial-port connected cameras to increase overall minimum cyber security level. Corrections in 8.40.1 ================================================================================ 8.40.1:C1 Corrected an issue that resets the barrel distortion correction settings after updating the camera. 8.40.1:C2 Corrected an issue with incorrect handling of ACAPs after camera boot. 8.40.1:C3 Corrected an issue that prevented the user from formatting SD cards and the web- interface to show incorrect information about network share status in Settings -> System -> Storage. 8.40.1:C4 Added selection boxes for disabling TLSv1.0 and TLSv1.1 in Settings -> System -> PlainConfig -> HTTPS to enforce the highest possible TLS version for HTTPS-based connections. 8.40.1:C5 Corrected an issue that could cause a network share to become read-only. 8.40.1:C6 Corrected an issue that prevented the overlay to show the correct state of inputs when toggling. 8.40.1:C7 Corrected an issue in the ACAP framework that caused installed ACAPs to become unresponsive and the Apps tab not to be shown correctly. 8.40.1:C8 Corrected an issue that let the network share test under Events -> Recipient fail when a NAS was connected that only supports SMB 1.0 or SMB 2.0. 8.40.1:C9 Corrected an issue that caused AXIS Perimeter Defender or SafeZoneEdge to stop working after a firmware upgrade. 8.40.1:C10 Corrected an issue that caused the certificate signing request not to have an LF (alt. CR-LF) every 64th character causing the certificate considered not being valid e.g. when using symantec certificates. 8.40.1:C11 Corrected an issue that prevented the user from creating a Recipient when a "-" sign was present in the host name. 8.40.1:C12 Corrected an issue that could cause the configuration file upload from ADM to camera to fail. 8.40.1:C13 Corrected an issue that prevented the user to export recordings in the desired time range. 8.40.1:C14 Corrected an issue that prevented the camera to switch between Day/Night mode on rare occasions. 8.40.1:C15 Patched security vulnerability CVE-2018-5390 to increase overall minimum cyber security level. 8.40.1:C16 Patched security vulernability CVE-2018-14526 to increase overall minimum cyber security level. Known Bugs/Limitations ================================================================================ 8.40.3:L1 It is recommend to refresh the browser with F5 after doing a FW upgrade from FW 6.xx to 8.xx or higher in order to show all the new settings in the web- interface. 8.30.1.1:L1 When using the Edge or Firefox web browser automatic license installation doesn't work as expected. 8.30.1.1:L2 Some parts of the web-interface may not be fully translated. 8.30.1.1:L3 It is not possible to update the product using Genetec 5.7 SR2. Genetec will provide a patch in 5.7 SR3. 8.30.1.1:L4 There is only one available pre-installed audio clip (Camera clicks). 8.20.1.1:L1 When downgrading a firmware the static IP configuration is lost. Axis recommends to perform a factory reset after downgrading. 8.20.1.1:L2 When using an iOS device and Chrome or Safari web browser it is not possible to switch from viewer to administrator or operator. Supported AXIS VAPIX API Image Resolutions for Q1645/-LE ================================================================================ Resolution Exceptions ========== ========== 1920x1080 1400x1050 1440x960 1280x960 1280x720 1024x768 800x600 854x480 800x450 720x480 640x480 672x448 640x360 480x360 480x320 320x240 320x180 240x180 240x160 160x120 768x576 1) 720x576 1) 704x576 1) 704x480 1) 704x288 1) 704x240 1) 480x270 1) 384x288 1) 352x288 1) 352x240 1) 192x144 1) 176x144 1) 176x120 1) 1) Not visible in web user interface