# Enterprise Wi-Fi Access Point – Release 4.2.3.3 Now Available

**URL:** https://community.cambiumnetworks.com/t/enterprise-wi-fi-access-point-release-4-2-3-3-now-available/108167
**Category:** Enterprise Wi-Fi Networks
**Tags:** release-notes
**Created:** [March 6, 2026, 4:09am UTC](https://community.cambiumnetworks.com/t/enterprise-wi-fi-access-point-release-4-2-3-3-now-available/108167 "2026-03-06T04:09:21Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![CAM\_TSK](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/c/5f8ce5/32.png) [@CAM\_TSK](https://community.cambiumnetworks.com/u/CAM_TSK)
#### Post date: [March 6, 2026, 4:09am UTC](https://community.cambiumnetworks.com/t/enterprise-wi-fi-access-point-release-4-2-3-3-now-available/108167/1 "2026-03-06T04:09:22Z")

</div>

We’re pleased to announce the availability of **Enterprise Wi-Fi Access Point Release 4.2.3.3** — a software update focused on **enhanced reliability, strengthened regulatory compliance** across the **Cambium Wi-Fi 5 portfolio**.

* * *

# **Key Highlights**

- **Security & Compliance Enhancements:**
  - SHA1 HMAC algorithm is disabled for SSH
  - CVE-2018-19052, CVE-2019-11072 are addressed.
  - OpenSSL is updated as per **OpenSSL Releases Security Advisory**.
  - Additional ICMP/ARP logging to meet EU RED (EN 18031) requirements.

* * *

# **Fixed Issues**

- Switches were learning client packets on native VLAN with Layer2 Unicast frames.
- SSID with certain special characters on cnMaestro Captive Portal were causing invalid signatures.
- Auto-RF power was triggered even when static channel was configured.
- The Auto-RF Dynamic Channel hold time configured in the cnMaestro UI was not applied to the AP configuration.
- `service radio iwpriv` CLI command is now persistent even after an AP restarts.
- WLAN supports a maximum client limit based on the cumulative number of clients across all radios.
- Layer2 broadcast frames that are generated by the AP are now blocked.
- AP upgrade failed when required memory was not available.

* * *

# **Known Issues**

| Tracking ID | Platform | Description | Workaround |
| --- | --- | --- | --- |
| FLCN-19011 | All | Events are not generated for successful login attempts. Users are also not locked after a configured number of failed attempts. | None |
| FLCN-12136 | e410 | Unable to override passphrase of SSID when SSID contains special characters when created at group level (for example, dot (.)). | None |
| FLCN-11072 | All | Client connection issues when XWF traffic class URL length exceeds 64. | None |
| FLCN-11024 | All | Client association fails if WLAN is configured with RADIUS ePSK and 11r. | None |

# **Limitations**

| Tracking | Product | Description / Workaround |
| --- | --- | --- |
| FLCN-9584 | e410b | Recommended minimum transmit power:
- 2.4GHz: 9dBm
- 5GHz: 12dBm

 |
| FLCN-6464 | e425/e505 | The Autopilot feature is not supported. |

* * *

# **Availability**

**Release 4.2.3.3** is now available for download on the 🔗 [Cambium Support Portal](https://support.cambiumnetworks.com/).

Please review the release notes for platform-specific details, upgrade paths, and known issues before deployment.

* * *

### 💬 **Your Feedback Matters**

We encourage customers and partners to share observations, deployment results, or suggestions in this thread.

Your feedback helps us drive continual improvement across the Cambium Enterprise Wi-Fi portfolio.