Release Date:

February 12, 2026

This firmware supports the GSM4210PD, GSM4210PX, GSM4212P, GSM4212PX, GSM4212UX, MSM4214X, and XSM4216F models.

Enhancements:

The AV UI provides the following enhancements:

• Support for the Default profile with IGMP Plus enabled.
• Updated the Data profile to disable IGMP.
• Updated the Audio Basalte Multiroom profile to disable IGMP and MLD snooping.
• Updated the Audio Dante profile to remove storm-control for broadcast traffic.
• Updated the Lighting profile to remove storm-control for broadcast traffic.
• Updated the G&D KVM-over-IP profile and applied MAC filtering on trunk and LAG interfaces.
• Removed “cos queue strict” configuration from global QoS settings.
• Changed the default AV UI color placeholder to #00FF00 when you create a new profile.

Bug Fixes:

This firmware addresses the following bugs:

• Fixes the issue where downloading a configuration file with a non-ASCII character in port description to the switch fails. [CE-7073]
• Fixes the issue where NET-BLOCK ACL allows IGMP query packets to receive on a port and process. [CE-6990]
• Fixes the issue where SNMP traps are not sent after switch is rebooted. [CE-6943]
• Fixes the issue where switch is configured as the gPTP GM and advertise Clock Class capability as 255. [MS-5169]
• Fixes the issue where multicast entries are not learnt when MLD Plus is disabled on a VLAN. [MS-5040]
• Fixes the issue that the Rest API script is rejected if you use the Linux platform. [CE-7454]
• Fixes the issues that the Rest API token does not work after 24 hours. [CE-7418]
• Fixes the issue that the Rest API is rejected with other admin users. [CE-7351]
• Fixes the issue that flow control does not display in the API response. [CE-7292]

Known Issues:

This AV UI contains the following known issues:

· Affected Profile: Audio Dante - Potential Network Loop on Dual-Port Dante Devices

If a Dante device with two Ethernet ports has both ports connected to the network simultaneously, a Layer 2 loop may occur, causing network instability or outage.

Workaround: Choose one of the following:

Connect only one Ethernet port per Dante device — leave the secondary/redundant port disconnected.

Manually re-enable STP on the affected interface 

Connect the Dante Primary and Secondary ports to two separate, independent networks with different VLANs, in line with Audinate’s official redundant design.

As an alternative, use Video with Audio Dante profile and toggle on PTP-TC.

• CPU usage reaches 90% if more than 500 VLANs are created and AV UI is used.

Workaround: Do not create more than 500 VLANs.

This firmware contains the following known issues:

• This firmware includes a configuration migration process that transitions the default web browser protocol from HTTP to HTTPS. When you upgrade to this firmware and import an older configuration with HTTPS disabled, HTTPS becomes enabled.

Workaround: Reconfigure the web browser protocol settings manually after you perform a firmware upgrade or import an older configuration.

• During your initial log in, you must set up a password to access the switch. However, if you access the main UI before you set up a password and simultaneously set the password in the AV UI, the switch console might lock for up to 15 minutes.
  Workaround: Configure a password in either the main UI or the AV UI to avoid this lock up issue.
• If you upload only the private key or the certificate before you enable HTTPS, the system enables the HTTPS service but it fails to operate correctly because the configuration is incomplete. A factory reset does not fix this issue.

Workaround: Ensure both the private key and certificate are fully uploaded before you enable HTTPS. If the issue still occurs, remove the incomplete HTTPS-related private key or certificate, and disable HTTPS before reconfiguring.

Warnings:

Read and follow these warnings before updating your firmware:

• SNTP is deprecated from firmware version 13.0.5.10 onwards and NTP is introduced. Configure an NTP server in your network. Remove SNTP related settings from the configuration file on firmware version 13.0.4.x before you apply it to the switch running firmware version 13.0.5.x.
• HTTPS is set to the default web browser protocol from firmware version 13.0.5.20 and newer versions. The default certificate is self-signed, so you might encounter a browser warning when you log in. To avoid this warning, you can download your own certificate issued by a trusted Certificate Authority (CA).

General Information:

• The boot code remains at the existing version 1.0.0.11 in this switch firmware.
• The process of upgrading the firmware and boot code takes about three minutes. Apply the “update bootcode” command from the command line interface. Do not switch off or restart the device during the upgrade process.
• AppMgr is upgraded to version 1.0.5.32 in this switch firmware.
• Insight and Engage/AV UI are mutually exclusive. This means you can only use one of these options to configure and manage the switch, not both.
• If the encrypted password in the configuration file does not adhere to the NETGEAR password policy, when the configuration file is loaded on the firmware version 13.0.5.16 or later, you must create a new password during the initial login.

Download Link: https://www.downloads.netgear.com/files/GDC/M4250/GSM421xxx_MSM4214_XSM4216F_V13.0.5.24.zip

Firmware Checksum Details

File Name: M4250L-v13.0.5.24.stk

MD5: ADE90A96AD88F84412AED8808CF1EBC6

SHA-256: a781eb295ea6e6981fc5ebc612b61eb7c95bc6644229e651c2aadf67f0106320

Firmware Update Instructions:

To update your product’s firmware, follow the instructions in your product’s user manual. To find your user manual, visit https://www.netgear.com/support/, enter your model number in the search box, and click the Documentation button on the product page.