› UKTH forums › 🛜 Wireless Routers & Modems › ASUS & Wireless › Asus RT-AX88U / Pro – Firmware Updates Thread ============================ Router Model – Asus RT-AX88U Firmware Version – 3.0.0.4.384.7756 Firmware Release Date – 2019/11/25 ============================ Changelog – – Enhanced the Wi-Fi 6 performance with Apple® iPhone11, Samsung® S10. –...
- This topic has 138 replies, 7 voices, and was last updated 1 week, 3 days ago by
UK Sentinel.
- AuthorPosts
- August 29, 2022 at 8:48 am #20657
Seems you are able to change the listening port on Wireguard and changing the default listening port could be a good idea just as it is a good idea to change the port on OpenVPN and others VPN servers if possible.
In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
September 29, 2022 at 7:50 pm #21029New firmware release for ASUS RT-AX88U Firmware version – a big security update
ASUS RT-AX88U Firmware version 3.0.0.4.388.20558
2022/09/21
Bug fixes
– Fixed port status UI bugs
– Modified WireGuard VPN server default setting to fix iOS WireGuard app connection issues. If you have iOS connection issues on the previous version(3.0.0.4.388.20518), please upgrade to this version and reset the router.
– Fixed VPN fusion connection issues with Surfshark WireGuard profile.
– Improved the AiMesh stability.Security
– Fixed HTTP response splitting vulnerability. Thanks to Efstratios Chatzoglou, University of the Aegean.
– Fixed status page HTML vulnerability. Thanks to David Ward.
– Fixed CVE-2018-1160. Thanks to Steven Sroba.
– Fixed cfg_server security issue.
– Fixed CVE-2011-0719, CVE-2012-2812, CVE-2012-2836, CVE-2012-2837, CVE-2012-2841, CVE-2012-3868, CVE-2013-0172, CVE-2013-4124, CVE-2014-3493, CVE-2015-0240, CVE-2015-5252, CVE-2015-5296, CVE-2015-5299, CVE-2015-5370, CVE-2016-2110, CVE-2016-2111, CVE-2016-2112, CVE-2016-2115, CVE-2016-2118, CVE-2016-4425, CVE-2016-6328, CVE-2016-10196, CVE-2018-5743, CVE-2018-13305, CVE-2018-15822, CVE-2018-20030, CVE-2018-1999012, CVE-2019-9278, CVE-2019-17498, CVE-2020-0093, CVE-2020-0182, CVE-2020-12767, CVE-2020-13112, CVE-2020-13113,CVE-2020-13114, CVE-2020-13904,CVE-2020-14323, CVE-2020-20450, CVE-2020-20451, CVE-2020-20891, CVE-2020-20892, CVE-2020-20896, CVE-2020-20898, CVE-2020-21041, CVE-2020-21688, CVE-2020-21697, CVE-2020-22016, CVE-2020-22017, CVE-2020-22020, CVE-2020-22022, CVE-2020-22023, CVE-2020-22025, CVE-2020-22026, CVE-2020-22027, CVE-2020-22028, CVE-2020-22030, CVE-2020-22031, CVE-2020-22032, CVE-2020-22036, CVE-2020-22038, CVE-2020-22039, CVE-2020-22040, CVE-2020-22041, CVE-2020-22042, CVE-2020-22043, CVE-2020-22044, CVE-2020-22046, CVE-2020-22048, CVE-2020-22049, CVE-2020-22051, CVE-2020-22054, CVE-2020-23906, CVE-2022-35401,CVE-2021-38090,CVE-2021-38091, CVE-2021-38092, CVE-2021-38093, CVE-2021-38094, CVE-2021-38114, CVE-2021-38171.https://dlcdnets.asus.com/pub/ASUS/wireless/RT-AX88U/FW_RT_AX88U_300438820558.zip
In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
January 13, 2023 at 7:46 pm #22400New ASUS RT-AX88U Firmware version 3.0.0.4.388.22237
Version 3.0.0.4.388.22237
1. Improved system stability.
2. Fixed the IPsec VPN compatibility issue with Win10.
3. Fixed the VPN fusion user interface issues under the HTTPS connection.
4. Fixed Client DOM Stored XSS vulnerability.
5. Improved Wireguard performance.
6. Optimized memory usage and improved system stability.
7. Fixed USB HDD compatibility issue with the Time machine.
8. Added a new web GUI login URL http://www.asusrouter.com
9. Fixed IPTV compatibility issue with Movistar. Thanks to Sergio de Luz from RedesZone.net.
10. Fixed VPN fusion, AiMesh, and Network map GUI bugs.In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
May 1, 2023 at 4:36 pm #24175New ASUS RT-AX88U Pro Firmware version 3.0.0.4.388.23110
Version 3.0.0.4.388.23110
Release date: 2023/04/26
New features:
-Built-in Surfshark in VPN Fusion allows you to surf the internet anonymously and securely from anywhere by encrypting connections. Please refer to https://asus.click/SurfsharkVPN-iPhone/Android USB auto backup WAN allows you to connect your phone to the router’s USB port and use it as an internet source. Please refer to https://asus.click/AutobackupWAN
-DDNS transfer allows you to transfer your ASUS DDNS hostname from your original router to the new one. Please refer to https://asus.click/ASUSDDNS
Bug fixes and functionality modifications:
-Resolved the issue with login and password changes.
-Resolved the IPSec VPN connection issues.
-Resolved the Instant Guard connection issues.
-Fixed the AiCloud login issue after unplugging and plugging the HDD into the USB port.
-Fixed the issue where Traffic Analyzer sometimes couldn’t record data.
-Fixed the time display issue for the preferred upgrade time in the Auto Firmware Upgrade function.
-Fine-tuned the description for port status.
-Enabled DynDNS and No-IP DDNS to use IPv6.
-Fixed AiMesh preferred AP identification in site survey results.
-Updated timezone list for Greenland, Mexico, and Iran.
-Modified the USB application option text in dual WAN.
-Allowed WireGuard Server clients to access the Samba server.
-Fixed memory leak issue.
-Enabled the failback function when using the iOS/Android USB backup WAN.Security updates:
-Enabled and supported ECDSA certificates for Let’s Encrypt.
-Enhanced protection for credentials.
-Enhanced protection for OTA firmware updates.
-Fixed DoS vulnerabilities in firewall configuration pages. Thanks to Jinghe Gao’s contribution.
-Fixed DoS vulerabilities in httpd. Thanks to Howard McGreehan.
-Fixed information disclosure vulnerability. Thanks to Junxu (Hillstone Network Security Research Institute) contribution.
-Fixed CVE-2023-28702 and CVE-2023-28703. Thanks to Xingyu Xu(@tmotfl) contribution.
-Fixed null pointer dereference vulnerabilities. Thanks to Chengfeng Ye, Prism Research Group – cse hkust contribution.In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
June 27, 2023 at 3:16 pm #25320Latest ASUS RT-AX88U Pro Firmware version 3.0.0.6.102_21514
Version 3.0.0.6.102_21514
Release date: 2023/06/20
New features for ASUSWRT 5.0
-Kids’ Wi-Fi: Create a separate network specifically for children, complete with scheduled controls. This is suitable for children who use multiple network devices that have enabled the randomized MAC address function and are not easily recognized.-VPN WiFi: Create a VPN network that connects to 3rd party VPN services or with ASUS site to site -VPN(https://www.asus.com/support/FAQ/1048281/) to encrypts your internet connection and hides your IP address to protect your online activities from being tracked or monitored.
-IoT WiFi : Create an 2.4G spearate network for IoT (Internet of Things) devices.
Guest WiFi: Create a guest network with a WiFi schedule and access rights to control when and how guests can use the network.-VLAN, allow you to segment a network into smaller, virtual sub-networks, which can be used to isolate traffic, please refer to https://www.asus.com/support/FAQ/1049415/
-Multi-services WAN, create multiple profiles on a single WAN interface. (https://rog.asus.com/au/support/FAQ/1050072)
-Port isolation and AP isolation to restrict device access to each other.:
Bug Fixes and Enhancements:
-NowTV profile has been added under new IPTV profiles.
-IPTV settings have been updated for better compatibility with Unifi Biz VoIP service.
-Fixed a GUI bug that occurred when adding port range rules in the Network Service Filter.
-Resolved an issue that caused hostname errors in the DDNS service.Security Fixes:
-Fixed several curl vulnerabilities including CVE-2023-28322, CVE-2023-28321, and CVE-2023-28319.
-Fixed FFmpeg vulnerabilities, specifically CVE-2022-3964, CVE-2022-48434, and CVE-2022-3109.
-Corrected an OpenVPN vulnerability categorized as CWE-134.
-Fixed the Hostap vulnerability CVE-2019-10064.
-Patched a command injection vulnerability to improve overall security.
-Strengthened protection against SSH brute force attacks.In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
July 27, 2023 at 5:27 am #26089Latest ASUS RT-AX88U Firmware version 3.0.0.4.388_23748
Version 3.0.0.4.388_23748
2023/07/26
New features:
-Built-in Surfshark in VPN Fusion allows you to surf the internet anonymously and securely from anywhere by encrypting connections. Please refer to https://asus.click/SurfsharkVPN-iPhone/Android USB auto backup WAN allows you to connect your phone to the router’s USB port and use it as an internet source. Please refer to https://asus.click/AutobackupWAN
-DDNS transfer allows you to transfer your ASUS DDNS hostname from your original router to the new one. Please refer to https://asus.click/ASUSDDNS
Bug fixes and functionality modifications:
-Resolved the issue with login and password changes.
-Resolved the IPSec VPN connection issues.
-Resolved the Instant Guard connection issues.
-Fixed the issue where Traffic Analyzer sometimes couldn’t record data.
-Fixed the time display issue for the preferred upgrade time in the Auto Firmware Upgrade function.
-Enabled DynDNS and No-IP DDNS to use IPv6.
-Fixed AiMesh preferred AP identification in site survey results.
-Updated timezone list for Greenland, Mexico, and Iran.
-Allowed WireGuard Server clients to access the Samba server.
-Resolved the issue where the USB path is not displayed on the Media Server page in the AiMesh nodeSecurity updates:
-Enabled and supported ECDSA certificates for Let’s Encrypt.
-Allowed binding DDNS to a user’s account to reduce the risk of MITM attacks
-Enhanced protection for credentials.
-Enhanced protection for OTA firmware updates.
-Fixed CVE-2023-34359,CVE-2023-34358 Unauthenticated Denial of Service
-Fixed CVE-2023-34360 Stored XSS
-Fixed DoS vulnerabilities in firewall configuration pages.
-Fixed DoS vulerabilities in httpd.
-Fixed information disclosure vulnerability.
-Fixed CVE-2023-28702 and CVE-2023-28703.
-Fixed null pointer dereference vulnerabilities.
-Fixed the cfg server vulnerability.
-Fixed the vulnerability in the logmessage function CVE-2023-35086/ CVE-2023-35087.
-Fixed lighttpd vulnerability, CVE-2023-35720.
-Fixed several curl vulnerabilities including CVE-2023-28322, CVE-2023-28321, and CVE-2023-28319.
-Fixed FFmpeg vulnerabilities, specifically CVE-2022-3964, CVE-2022-48434, and CVE-2022-3109.
-Fixed openssl vulnerability, CVE-2023-0464.
-Fixed ReadyMedia vulnerabilitym CVE-2020-28926.
-Fixed UPnP vulnerability CVE-2020-12695.
-Patched a command injection vulnerability to improve overall security.
-Strengthened protection against SSH brute force attacks.In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
October 21, 2023 at 9:41 am #27655New ASUS RT-AX88U Firmware version 3.0.0.4.388_24198
Version 3.0.0.4.388_24198
2023/10/20
Bug fixes and improvements:
-Ensured consistent display of client status on the WireGuard server.
-Enhanced system stability when accessing the WireGuard Server with DMZ enabled.
-Improved stability when enabling or disabling the WireGuard server.
-Addressed an issue that prevented clients from accessing the network when setting up the OpenVPN server in TAP mode.
-Optimized memory utilization and fixed an occasional server error when registering DDNS with an app.
-Corrected a bug encountered when adding a rule to the Network Services Filter.Security Fixes:
-Upgraded to the latest dropbear version.
-Fixed a stack overflow vulnerability.In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
November 28, 2023 at 5:08 pm #28244New ASUS RT-AX88U Pro Firmware version 3.0.0.6.102_32843
Version 3.0.0.6.102_32843
2023/11/27
New features:
– Added new iptv profile NowTV.
Bug Fixes and Enhancements:
– Resolved Guest Network Pro issues to prioritize devices for various business usages and network alternatives.
– Resolved AiMesh-related issues to provide stable backhaul connection.
– Resolved GUI issues to ensure that the user interface is even more user-friendly.
– fixed build error when removing ALEXA.
– Fixed client traffic monitor card.
– Fixed v6plus related issues.
– Fixed the registration failure after reboot when using account based DDNS.
– Fixed the issue that did not send report operation after acquiring the MAP rules.
– Fixed getting IPv6 address if setting hinet MOD mesh even router disable IPv6.
– Fixed an issue where DHCP discover packets were not being filtered when the hinet MOD mesh IPTV profile was set.
– Fixed offline Aimesh node can’t be removed successfully.– Fixed WiFi 5GHz LED control radio disabled case.
– Fixed DDNS server error occurs when registering DDNS with ASUS Router app.
– Resolved OpenVPN server TAP Mode Issue.
– Corrected a bug encountered when adding a rule to the network services filter.
New features:
– Added new iptv profile NowTV.
Security Fixes:
– Fixed several curl vulnerabilities.
– Fixed command Injection Issue after authentication
In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
January 14, 2024 at 8:27 am #29097Latest ASUS RT-AX88U Pro Firmware version 3.0.0.6.102_33308
Version 3.0.0.6.102_333082024/01/12Bug Fixes and Enhancements:
– Resolved issues where Guest Network Pro and VPN connections were unable to access the internet due to DNS errors occurring when certain functions were activated.
– Removed execute mode from the backup file.
– Addressed translation issues in Guest Network Pro – Guest Portal – Terms of Service.
– Corrected the VPN WireGuard client profile name issue.
– Modified VPN routing rules.
– Fixed the access LAN issue after deleting the IoT Network.
– Addressed the VPN default connection issue.
– Fixed the problem where an AiMesh node could not broadcast WiFi signal normally when creating a Guest Network Pro WiFi-only network.In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
March 31, 2024 at 6:34 pm #31724New ASUS RT-AX88U Firmware version 3.0.0.4.388_24209
Version 3.0.0.4.388_24209
2024/03/29
Rlease note :
– Fixed command injection vulnerability.
– Fixed the ARP poisoning vulnerability. Thanks to the contribution of Xin’an Zhou.
– Fixed code execution in custom OVPN. Thanks to the contrubution of Jacob Baines.
– Fixed the injection vulnerability in AiCloud.
– Fixed stack buffer overflow in lighttpd. Special thanks to Viktor Edstrom.
– Fixed CVE-2023-35720
– Fixed the code execution vulnerability in AiCloud. Thanks to the contribution of chumen77.
– Fixed the XSS and Self-reflected HTML injection vulnerability. Thanks to the contrubution of Redfox Cyber Security.
*Please be advised that due to a security upgrade in AiMesh, we strongly recommend against downgrading to previous firmware versions, as this may lead to connection issues. Should you encounter any difficulties, resetting the AiMesh router to its default settings and re-establishing the mesh connection can resolve the problem.In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
August 20, 2024 at 5:26 pm #33160ASUS RT-AX88U Pro Firmware version 3.0.0.6.102_33309
Version 3.0.0.6.102_33309
2024/08/19
Changelog.
Fixed injection vulnerability.
In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
September 27, 2024 at 8:38 pm #34198Latest ASUS RT-AX88U Pro Firmware version 3.0.0.6.102_33320
Version 3.0.0.6.102_33320
2024/09/27
1. Optimized memory management mechanisms, improving system efficiency and stability.
2. Strengthened input validation and data processing workflows, further protecting your information security.
3. Improved web rendering engine, enhancing browsing experience and security.
4. Enhanced security of system command processing to guard against potential malicious operations.
5. Perfected JavaScript-related security mechanisms, offering a more secure web interaction environment.
6. Fixed the incorrect display of the DNS List interface.In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
November 8, 2024 at 6:32 am #34774ASUS RT-AX88U Pro Firmware version 3.0.0.6.102_33338
Version 3.0.0.6.102_33338
67.98 MB
2024/11/061. Strengthened input validation and data processing workflows to further protect information security.
2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
3. Enhanced device security through improved buffer handling in connection features.
4. Refined data handling processes, ensuring secure and accurate information management.
5. Enhanced file access control mechanisms, promoting a more secure operating environment.
6. Strengthened certificate protection, providing enhanced data security.Please unzip the firmware file, and then verify the checksum.
SHA256: 566e3072c233b020d46625b9346767a63c5571283fb1bc29275b71a9caa89055You need to login in order to vote
November 14, 2024 at 5:38 am #34853ASUS RT-AX88U Pro Firmware version 3.0.0.6.102_33340
Version 3.0.0.6.102_33340
67.97 MB
2024/11/12Bug Fixes and Enhancements:
– Fixed display issues on the AiMesh page.Security updates:
– Strengthened input validation and data processing workflows to further protect information security.
– Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
– Enhanced device security through improved buffer handling in connection features.
– Refined data handling processes, ensuring secure and accurate information management.
– Enhanced file access control mechanisms, promoting a more secure operating environment.
– Strengthened certificate protection, providing enhanced data security.Please unzip the firmware file, and then verify the checksum.
SHA256: 46a70e35a0e57f93ac847be136f5b6012a1fe9c5b3b953bc2cf4b446a8cff3c9You need to login in order to vote
November 21, 2024 at 1:51 am #34934ASUS RT-AX88U Firmware version 3.0.0.4.388_24221
Version 3.0.0.4.388_24221
67.95 MB
2024/11/181. Strengthened input validation and data processing workflows to further protect information security.
2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
3. Enhanced device security through improved buffer handling in connection features.
4. Refined data handling processes, ensuring secure and accurate information management.
5. Enhanced file access control mechanisms, promoting a more secure operating environment.
6. Strengthened certificate protection, providing enhanced data security.Please unzip the firmware file, and then verify the checksum.
SHA256: 1bcd3a7badf81d75ccb901b92cbf2ae7d77d15fae567509cb40f02a180b1a9d2You need to login in order to vote
- AuthorPosts
- You must be logged in to reply to this topic.
