Release ASUS RT-AC66U B1 Firmware version 3.0.0.4.386_51685 2024/04/15

[bbunge]

Version 3.0.0.4.386_51685

98.85 MB

2024/04/15

- Fixed command injection vulnerability.
- Fixed the ARP poisoning vulnerability. Thanks to the contribution of Xin'an Zhou.
- Fixed code execution in custom OVPN. Thanks to the contrubution of Jacob Baines.
- Fixed the injection vulnerability in AiCloud.
- Fixed stack buffer overflow in lighttpd. Special thanks to Viktor Edstrom.
- Fixed CVE-2023-35720
- Fixed the code execution vulnerability in AiCloud. Thanks to the contribution of chumen77.
- Fixed the XSS and Self-reflected HTML injection vulnerability. Thanks to the contrubution of Redfox Cyber Security.

*Please be advised that due to a security upgrade in AiMesh, we strongly recommend against downgrading to previous firmware versions, as this may lead to connection issues. Should you encounter any difficulties, resetting the AiMesh router to its default settings and re-establishing the mesh connection can resolve the problem.

Please unzip the firmware file, and then verify the checksum.
SHA256: aded7987b384440cffc24755a9e5005d09174bf4d2836ba8e50c3bca8866b755

https://dlcdnets.asus.com/pub/ASUS/wireless/RT-AC66U_B1/FW_RT_AC66U_B1_300438651685.zip?model=RT-AC66U-B1

Note: My RT-AC66U_B1 was unable to detect the upgrade from the router GUI. A manual download, unzip, checksum and manual upgrade did work.

 

[Tech9]

All RT-AC68U variants got the same firmware update. You can make another thread for RT-AC1900P if you like, @bbunge.

RT-AC1900P - Support

www.asus.com

It's exactly the same firmware file containing image for RT-AC68U V4 variant. This is where the double size is coming from.

 

[bbunge]

All RT-AC68U variants got the same firmware update. You can make another thread for RT-AC1900P if you like, @bbunge.

RT-AC1900P - Support

www.asus.com

It's exactly the same firmware file containing image for RT-AC68U V4 variant. This is where the double size is coming from.

Who said anything about double size? And, there are still some folks who do not know some routers use the same firmware. Soon, you can quit complaining about it.

 

[Tech9]

Soon, you can quit complaining about it.

Complaining about it? About what?

And, there are still some folks who do not know some routers use the same firmware.

You may create a new release thread for RT-AC1900P. Copy/paste, done.

 

[karlr]

Hi, new here. I'm running my RT-AC66U on the last office release for it. That would be 380.70
Am I to understand the Firmware version 3.0.0.4.386_51685 2024/04/15 at the start of this thread is perfectly suitable for it?
Thanks in Adv

 

[bbunge]

Hi, new here. I'm running my RT-AC66U on the last office release for it. That would be 380.70
Am I to understand the Firmware version 3.0.0.4.386_51685 2024/04/15 at the start of this thread is perfectly suitable for it?
Thanks in Adv

No if it is an AC66U
Yes if is an AC66U_B1

There is a difference between the two!

 

[Tech9]

I'm running my RT-AC66U on the last office release for it. That would be 380.70

Latest official Asuswrt release for your router is here:

RT-AC66U - Support

www.asus.com

This model is End-of-Life for many years. You may want to upgrade it for security reasons.

 

[karlr]

No if it is an AC66U
Yes if is an AC66U_B1

There is a difference between the two!

Thanks I'm running the former A2 HW version.

 

[Pmac5]

Version 3.0.0.4.386_51685

98.85 MB

2024/04/15

- Fixed command injection vulnerability.
- Fixed the ARP poisoning vulnerability. Thanks to the contribution of Xin'an Zhou.
- Fixed code execution in custom OVPN. Thanks to the contrubution of Jacob Baines.
- Fixed the injection vulnerability in AiCloud.
- Fixed stack buffer overflow in lighttpd. Special thanks to Viktor Edstrom.
- Fixed CVE-2023-35720
- Fixed the code execution vulnerability in AiCloud. Thanks to the contribution of chumen77.
- Fixed the XSS and Self-reflected HTML injection vulnerability. Thanks to the contrubution of Redfox Cyber Security.

*Please be advised that due to a security upgrade in AiMesh, we strongly recommend against downgrading to previous firmware versions, as this may lead to connection issues. Should you encounter any difficulties, resetting the AiMesh router to its default settings and re-establishing the mesh connection can resolve the problem.

Please unzip the firmware file, and then verify the checksum.
SHA256: aded7987b384440cffc24755a9e5005d09174bf4d2836ba8e50c3bca8866b755

https://dlcdnets.asus.com/pub/ASUS/wireless/RT-AC66U_B1/FW_RT_AC66U_B1_300438651685.zip?model=RT-AC66U-B1

Note: My RT-AC66U_B1 was unable to detect the upgrade from the router GUI. A manual download, unzip, checksum and manual upgrade did work.

thanks just what i'm hoping for. mine is the B1 version and i recently upgraded to firmware 3.0.0.4.389_51729- i'm giving this a shot, I'll report the outcome later, many thanks
PS will this work for my firmware release or do I need to have your exact release first?

 

[Tech9]

i recently upgraded to firmware 3.0.0.4.389_51729

Version 3.0.0.4.386_51729 is latest available firmware for your router from 2025/02/14 - newer than the version discussed in this thread. You don't have to do anything, just continue using your router.

RT-AC66U B1｜WiFi Routers｜ASUS Global

ASUS has a range of wireless routers suitable for every purpose. Whether it's for your home, for business trips, or for any other need or environment, there's an ASUS router for you.

www.asus.com

 

[Pmac5]

Appreciated Tech 9, actually i misread the thread I thought it was a custom firmware for the B1, been searching a while now, cant find any support for the B1

 

[Tech9]

been searching a while now

Final 386 code base Asuswrt-Merlin:

Asuswrt-Merlin - Browse /RT-AC68U at SourceForge.net

Alternative firmware for Asus wireless routers

sourceforge.net

Current FreshTomato, continued support:

Index of /downloads/freshtomato-arm/2024/2024.5/

This router is a variant of RT-AC68U and runs on the same firmware.

 

[Pmac5]

Final 386 code base Asuswrt-Merlin:

Asuswrt-Merlin - Browse /RT-AC68U at SourceForge.net

Alternative firmware for Asus wireless routers

sourceforge.net

Current FreshTomato, continued support:

Index of /downloads/freshtomato-arm/2024/2024.5/

This router is a variant of RT-AC68U and runs on the same firmware.

 

[Pmac5]

Awesome Tech9, i'm getting busy on it now

 

[Tech9]

You have to have specific reasons to replace the stock firmware. If everything is working for you as expected - save your time. This router has >12 years old hardware inside and no firmware will make it "wow" better.

 

[Pmac5]

You have to have specific reasons to replace the stock firmware. If everything is working for you as expected - save your time. This router has >12 years old hardware inside and no firmware will make it "wow" better.

 

[Pmac5]

sorry for delayed reply, I intend to make it a VPN router on my home network but it was suggested that a custom firmware would allow more advanced VPN options. Tell you the truth, I just want it to work as its my first time having VPN service and all that. I thought maybe, just maybe I could extend its lease of life, I'm aware that it has reached the end but wouldn't flashing the firmware breathe some life into it?

 

[Tech9]

I intend to make it a VPN router

I see, commercial VPN scare tactic advertising got to you...

This router can do only about 30-40Mbps on commonly used OpenVPN protocol limited by the CPU.

 

[Pmac5]

"commercial VPN scare tactic", lol, you're not wrong there. So i'm realising that i can go this alone without the middle guy with openvpn plus the router does DDNS. I dont mind 30 40 Mbs until i familiarize myself with the whats nots then i'll go for the RT-AX86S or... any advice welcome. To summarise, there's no need to flash this router, just use openvpn already available on it. Please correct me if i'm wrong, Thanks for your insight

 

[bbunge]

"commercial VPN scare tactic", lol, you're not wrong there. So i'm realising that i can go this alone without the middle guy with openvpn plus the router does DDNS. I dont mind 30 40 Mbs until i familiarize myself with the whats nots then i'll go for the RT-AX86S or... any advice welcome. To summarise, there's no need to flash this router, just use openvpn already available on it. Please correct me if i'm wrong, Thanks for your insight

Right. This router does have OpenVPN. An older version but it will work. Disable Compression in the advanced settings.

And there is a new firmware: Version 3.0.0.4.386_51729