What's new

ASUS Product Security Advisory - 12/03/2024 ASUS Router Improper Input Validation

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

bennor

Part of the Furniture
Asus posted a notice on improper router input validation for CVE-2024-11985 with firmware updates for RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX57, RT-AX58U, RT-AX58U_V2.

12/03/2024 ASUS Router Improper Input Validation
ASUS has released a new firmware update for RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX57, RT-AX58U, RT-AX58U_V2

We advise you to check your equipment and security procedures regularly, as this will make you safer. As a user of an ASUS router, we recommend doing the following steps:
• Update your router with the newest firmware. We encourage you to do this when new firmware becomes available. You can find the newest firmware on the ASUS support page at
https://www.asus.com/support/ or the relevant product page at
https://www.asus.com/Networking/. ASUS has provided a link to new firmware for some routers at the end of this notice.
• Use different passwords for your wireless network and router-administration page. Use passwords that have at least 10 characters, with a mix of capital letters, numbers and symbols. Do not use the same password for more than one device or service.

If you are not able to update the firmware quickly, please make sure that both your login and WiFi passwords are strong. It is recommended (1) disable any services that can be reached from the internet, such as remote access from WAN, port forwarding, DDNS, VPN server, DMZ, port trigger. (2) passwords have more than 10 characters with a variety of capitalized letters, numbers, and special characters to increase the security level of your devices. Do not use passwords with consecutive numbers or letters, such as 1234567890, abcdefghij, or qwertyuiop."
For further help with router setup and an introduction to network security, please visit
How to update the firmware of your router to the latest version?
https://www.asus.com/support/FAQ/1039292
Please update the firmware for the listed models to the version in the table or newer.

 
@bennor

I checked the RT-AX58U download, the newest is: ASUS RT-AX58U Firmware version 3.0.0.4.388_25139,
Version 3.0.0.4.388_25139, 95.1 MB, 2024/11/07


The one referenced in your link is the old unpatched CN Botnet expossed one.
The link to the page is correct but the unpatched # should not be used.

Thanks for the post.
 
The one referenced in your link is the old unpatched CN Botnet expossed one.
It should be noted the Asus information posted does state to use the listed firmware's OR newer for the vulnerability they mention in their notice.
Please update the firmware for the listed models to the version in the table or newer.
And this:
Update your router with the newest firmware
One should use the latest firmware where possible. Asus should have done a better job conveying or highlighting that one should use the latest firmware.
 
Last edited:

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top