Release ASUS RT-AC68U Firmware version 3.0.0.4.386.51255

[VANT]

ASUS RT-AC68U Firmware version 3.0.0.4.386.51255
Version 3.0.0.4.386.5125598.38 MB
2023/03/02
1.Fixed HTTP response splitting vulnerability.
2.Fixed Samba related vulerabilities.
3.Fixed cfg server security issues.
4.Fixed Open redirect vulnerability.
5.Fixed token authentication security issues.
6.Fixed security issues on the status page.
7.Fixed XSS vulnerability.
8.Fixed CVE-2022-26376
9.Fixed CVE-2018-1160
10.Fixed IPv6-related bugs.
11.Added a new login URL http://www.asusrouter.com to fixed the login issues.
12.Optimize the AiMesh web interface
13.Fixed network map UI bugs
14.Fixed bugs related to Wi-Fi calling.
15.Supported web history record exported.
16.Fixed IPSec VPN server compatibility with Windows 10 VPN client.
17.Improved AiMesh connection stability.
18.Fixed IPTV issues.

Please unzip the firmware file first then check the MD5 code.
MD5: bc9aa1423070d398c409186e5aae1e69

DOWNLOAD

 

[bitsbytes]

Ten years of support. Now that's something I can priase Asus for.

 

[bennor]

Not sure about others but the MD5 hash (MD5: bc9aa1423070d398c409186e5aae1e69) listed on the firmware download page isn't matching the extracted firmware .trx file hash. Have tried several firmware downloads, same incorrect hash.

 

[Arctic Ace]

Update succeeded without errors.

 

[wouterv]

Performed online dirty upgrades of my RT-AC68U and RT-AC1900U, no issues so far.
Just glad to see the long list of (security-) fixes.

 

[Tvbaas]

Not sure about others but the MD5 hash (MD5: bc9aa1423070d398c409186e5aae1e69) listed on the firmware download page isn't matching the extracted firmware .trx file hash. Have tried several firmware downloads, same incorrect hash.

Asus updated the MD5 hash on the download page, seems to match now !

 

[bennor]

Asus updated the MD5 hash on the download page, seems to match now !

The US URL version still shows the old hash. (Yes forced reloaded the web page to avoid a cached version.)

So assume Asus hasn't gotten around to populating all their country/region specific pages yet.

 

[OzarkEdge]

When the MD5 did not match, I used the webUI to upgrade.

OE

 

[Ceejus]

I have an RT-AC86U running as an AP to a GT-AC2900 which is basically the same model with some added features. Any chance they apply this update to the latter?

 

[Tech9]

I have an RT-AC86U running as an AP to a GT-AC2900

This firmware thread is for RT-AC68U. The firmware thread for RT-AC86U is here:

Release - ASUS RT-AC86U Firmware version 3.0.0.4.386.51255

ASUS RT-AC86U Firmware version 3.0.0.4.386.51255 Wersja 3.0.0.4.386.5125565.6 MB 2023/03/02 1.Fixed HTTP response splitting vulnerability. 2.Fixed Samba related vulerabilities. 3.Fixed cfg server security issues. 4.Fixed Open redirect vulnerability. 5.Fixed token authentication security issues...

www.snbforums.com

Your GT-AC2900 needs own firmware. RT-AC86U firmware is not compatible with it.

 

[Ceejus]

This firmware thread is for RT-AC68U. The firmware thread for RT-AC86U is here:

Release - ASUS RT-AC86U Firmware version 3.0.0.4.386.51255

ASUS RT-AC86U Firmware version 3.0.0.4.386.51255 Wersja 3.0.0.4.386.5125565.6 MB 2023/03/02 1.Fixed HTTP response splitting vulnerability. 2.Fixed Samba related vulerabilities. 3.Fixed cfg server security issues. 4.Fixed Open redirect vulnerability. 5.Fixed token authentication security issues...

www.snbforums.com

Your GT-AC2900 needs own firmware. RT-AC86U firmware is not compatible with it.

I'm aware of this. But there have been lots of times over the years they release the same firmware for both models - look through the firmware update history for both if you don't believe me.

 

[Tech9]

they release the same firmware for both models

No, Asus never released the same firmware for both. RT-AC68U and RT-AC86U are completely different hardware routers and run very different firmware. If you are talking about RT-AC86U and the gaming version of it GT-AC2900 - they are both unrelated to this thread and this firmware.

 

[Ceejus]

No, Asus never released the same firmware for both. RT-AC68U and RT-AC86U are completely different hardware routers and run very different firmware. If you are talking about RT-AC86U and the gaming version of it GT-AC2900 - they are both unrelated to this thread and this firmware.

... crap. I didn't even notice that this was the forum for the 68, not 86. It's not like it isn't an easy mistake to make.

Still, the RT-AC86U is actually using the new 3.0.0.4.386.51255 version also, so the question does still apply: https://www.asus.com/us/networking-...-ac86u/helpdesk_download/?model2Name=RT-AC86U

 

[Tech9]

Your GT-AC2900 perhaps will get an update soon with the same or different release number.

 

[wouterv]

I noticed this:
Firmware version 3.0.0.4.386.51255
8.Fixed CVE-2022-26376
9.Fixed CVE-2018-1160.

And:
Firmware version 3.0.0.4.386.49703
1. Fixed CVE-2018-1160, CVE-2022-26376.

Better safe than sorry

 

[bennor]

The AC68U US page MD5 hash has been updated to the correct one so the hash now matches.

 

[sl4fko]

Wow... Really, kudos to ASUS team for supporting this router for so long.

29th firmware update?! Wow...

 

[wouterv]

Wow... Really, kudos to ASUS team for supporting this router for so long.

29th firmware update?! Wow...

I believe the firmware version count for the RT-AC68U is over 60, the ASUS site does not list older versions prior a certain date.

 

[Tech9]

@VANT, use Release tags on your new firmware threads for better visibility and easier search. Thank you!

 

[mdlguy10]

Does this update apply to RT-AC68U V4 even though they said it was EOL?