Release ASUS GT-AX6000 Firmware version 3.0.0.6.102_34793 (2024/08/28)

[bennor]

As mentioned by @Erwin in the Release ASUS GT-AX6000 Firmware version 3.0.0.6.102_34791 thread, there is new firmware out for the GT-AX6000.

ASUS GT-AX6000 Firmware version 3.0.0.6.102_34793
Version 3.0.0.6.102_34793 61.74 MB 2024/08/28
Fixed injection vulnerability.

GT-AX6000 - Support

www.asus.com

 

[Morac]

My router updated itself last night.

 

[mirko991]

My router updated itself last night.

You have the auto firmware upgrade enabled. Mine didn't update itself.

 

[Mazz]

What would "Fixed injection vulnerability" be exactly?

 

[Morac]

What would "Fixed injection vulnerability" be exactly?

Injection Flaws | OWASP Foundation

Injection Flaws on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.

owasp.org

How bad it is depends on whether it requires being logged in or not and whether it’s exploitable from the WAN side. Since they pushed out this firmware solely to fix this one issue and less than a month after releasing the first firmware in over a year, I’m assuming it’s on the bad side.

It may be related to https://securityvulnerability.io/vulnerability/CVE-2024-42757
There was POC code released for that which would explain the rush.

 

[rflw]

I had a few odd issues after installing, rolled back after a day, reapplied today, no more issue

 

[RogerSC]

Working well here, no problems. Pretty simple home network configuration, though.