› UKTH forums › 🛜 Wireless Routers & Modems › ASUS & Wireless › ASUS TUF-AX4200 Firmware version 3.0.0.4.388_34156 – 2026/10/02
- This topic has 0 replies, 1 voice, and was last updated 8 minutes ago by
UK Sentinel.
- AuthorPosts
- October 3, 2026 at 3:50 pm #43856
ASUS TUF-AX4200 Firmware version 3.0.0.4.388_34156
2026/10/02
– This update includes a required change for the Speedtest service. If Speedtest is supported on your model, you must install this update to continue using it. Please refer to Speedtest Service Announcement for details.
– Supports Surfshark VPN account login for a smoother user experience. (Supported model only)
Security Fixes
– Web management interface: Strengthened data handling for the connected device list and added stricter content checks when importing configuration profiles.
– Network speed test service: Added allowlist validation for service command parameters, so that only expected values are accepted.
– Certificate import process: Adjusted file handling and password passing, with stricter parameter validation.
– Third-party account authorization: Narrowed the recipients of authorization data to better protect authorization information.
– Web management interface: Adjusted the output handling of feedback content.
– Notification service: Added identity verification for local connection sources and tightened the related file permission settings.
– Mobile device connection authorization: Added a device matching check to strengthen the access token issuance process.
– Device discovery service: Removed a non-essential internal function endpoint to strengthen overall access control.
– AiMesh: Adjusted data access protection during the node joining process, improving system stability while connections are being established.
– System temporary directory: Adjusted the default permissions applied at creation time to narrow local file access.
– Network diagnostic data query: Strengthened value range checks for time interval parameters.
– Network diagnostic data query: Added allowlist validation for query fields.
– Internal data query: Improved field matching logic and optimized the memory release process under error conditions.
– Time synchronization settings: Strengthened parameter validation for the server name.
– File upload handling: Fixed an issue where certain input formats could cause the web management service to become unresponsive.
– Wireless channel selection tool: Adjusted the handling of command parameters to prevent unintended command execution.
– Certificate upload: Added a pre-check of archive contents to prevent files from being written to unintended locations.
– System configuration file generation: Strengthened parameter content checks to prevent abnormal configuration values from affecting network service settings.
– VPN and account authentication services: Adjusted the handling of connection settings and account data, with stricter parameter validation.We recommend updating to this version to maintain optimal protection.
In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
- AuthorPosts
- You must be logged in to reply to this topic.
