ASUS RT-AC87U Firmware version 3.0.0.4.382.50010

[win465]

ASUS RT-AC87U Firmware version 3.0.0.4.382.50010
Security fixed
-Fixed KRACK vulnerability
-Fixed CVE-2017-14491: DNS - 2 byte heap based overflow
-Fixed CVE-2017-14492: DHCP - heap based overflow
-Fixed CVE-2017-14493: DHCP - stack based overflow
-Fixed CVE-2017-14494: DHCP - info leak
-Fixed CVE-2017-14495: DNS - OOM DoS
-Fixed CVE-2017-14496: DNS - DoS Integer underflow
-Fixed CVE-2017-13704 : Bug collision
-Fixed predictable session tokens(CVE-2017-15654), logged user IP validation(CVE-2017-15653), Logged-in information disclosure (special thanks for Blazej Adamczyk contribution)
-Fixed web GUI authorization vulnerabilities.
-Fixed AiCloud XSS vulnerabilities
-Fixed XSS vulnerability. Thanks for Joaquim's contribution.
-Fixed LAN RCE vulnerability. An independent security researcher has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program
-Fixed remote code execution vulnerability. Thanks to David Maciejak of Fortinet's FortiGuard Labs
-Fixed Smart Sync Stored XSS vulnerabilities. Thanks fo Guy Arazi's contribution.
-Fixed CVE-2018-5721 Stack-based buffer overflow.

New features
-HDD Hibernation
-URL filter black/white list
-Bandwidth limiter on guest network
-URL filter support https website

Bug fixed
-Fixed CTF related issues
-Fixed AiCloud smart sync issue.
-Fixed client icon modification issue when client name includes special characters.
-Fixed AiCloud smart sync problem.


http://dlcdnet.asus.com/pub/ASUS/wireless/RT-AC87U/FW_RT_AC87U_300438250010.ZIP

Source: https://www.asus.com/us/Networking/RTAC87U/HelpDesk_Download/

 

[Maastricht]

Great.
Is is still sold and deserves to be supported.

 

[RMerlin]

I wonder if that means Quantenna finally fixed the Krack exploit on the 5 GHz side of things... If they did, that would potentially imply a newer Quantenna firmware is involved, after all these years.

 

[VANT]

https blocking not work. I set AIProtection for adult protect, but https sites still work.
Anyone can confirm ?

now i know why....old bug with 382 branch with web & apps filter

after device added then AIProtection crash,,,,,

 

[Odkrys]

https blocking not work. I set AIProtection for adult protect, but https sites still work.
Anyone can confirm ?

https blocking isn't related with ai protection. It use iptables.

iptables -I INPUT -i br0 -p udp --dport 53 -d 192.168.1.1 -m string --string "facebook" --algo bm -j DROP

iptables -I FORWARD -p tcp -m webstr --url "facebook" -j REJECT --reject-with tcp-reset

iptables -I FORWARD -i br0 -p udp --dport 53 -m string --string "facebook" --algo bm -j DROP

If you want to block adult category, dns filtering is the solution..(etc. opendns family shield)

 

[VANT]

@Odkrys
i mean about blocking porn https sites

 

[Odkrys]

@Odkrys
i mean about blocking porn https sites

It works on my RT-AC86U :O.
Browser pop ERR_SSL_PROTOCOL_ERROR up.

 

[VANT]

with great support from vanic, my problem is gone.

THX Vanic.

 

[VANT]

What You think about this ?

 

[RMerlin]

What You think about this ?

View attachment 11742

A malware on the Internet tried to scan your IP looking for a specific vulnerability, and the IPS blocked it. There's nothing unusual about this.

 

[triple]

ASUS RT-AC87U Firmware version 3.0.0.4.382.50010

works perfectly

 

[win465]

Experiencing higher ram usage with this update.

 

[VANT]

Experiencing higher ram usage with this update.

me too, but its normal in 382 fw

 

[JohnNerd]

High ram usage is good vs. low ram usage. Ram is there to be used.

 

[RMerlin]

Higher RAM usage is normal due to the new, more advanced Trend Micro engine used starting with 382.

Interesting fact: the Quantenna firmware is unchanged. Makes me suspect that Quantenna might have stopped updating the firmware for that chip.

 

[win465]

Higher RAM usage is normal due to the new, more advanced Trend Micro engine used starting with 382.

Interesting fact: the Quantenna firmware is unchanged. Makes me suspect that Quantenna might have stopped updating the firmware for that chip.

Did Asus provide you the GPL yet?

 

[RMerlin]

Did Asus provide you the GPL yet?

Yes.

 

[Advis]

I wonder if that means Quantenna finally fixed the Krack exploit on the 5 GHz side of things... If they did, that would potentially imply a newer Quantenna firmware is involved, after all these years.

I'm sure you've seen it but QSR1000 is still listed on Quantenna's website which has been redone since I last saw it. This chip lives no doubt.

 

[RMerlin]

I'm sure you've seen it but QSR1000 is still listed on Quantenna's website which has been redone since I last saw it. This chip lives no doubt.

You can sell hardware without providing new software development tho.

Anyway, probably no Krack issue to fix for the RT-AC87U since the QTN radio can't be used in Repeater mode.

 

[win465]

Yes.

Yes! I'm exited to try out your build of the new firmware.