Downloaded ePMP1000 software on to ePMP 1000 Hotspot

The reason I upgrade because of these

1. vulnerability in ePMP 1000

https://www.rapid7.com/db/modules/auxiliary/scanner/http/epmp1000_reset_pass

2. since this thread said, I can convert ePMP 1000 connectorized to hotspot.
I assume I can do vice versa

3. There is a procedure to recover in case of corrupted
http://community.cambiumnetworks.com/t5/ePMP-Troubleshooting/Recovery-of-flash-corrupted-ePMP-devices-caused-due-to-power/td-p/54712

But none said, I can't downgrade from 3.5.5 to 3.3.1

3.5.5 downloaded from here

https://support.cambiumnetworks.com/files/epmp/#r1

Whats next action?

1. if you give proper steps to downgrade. I can do myself

2. otherwise I'll RMA

tq