Release ASUS RT-AX68U Firmware version 3.0.0.4.388_24646 (2024/02/26)

[visortgw]

ASUS RT-AX68U Firmware version 3.0.0.4.388_24646
Version 3.0.0.4.388_24646
69.94 MB
2024/02/26
Bug Fixes and Enhancements：
- Enabled DynDNS and No-IP DDNS to use IPv6.
- Enabled WireGuard Server clients to access the Samba server.
- Enabled the failback function when using the iOS/Android USB backup WAN.
- Improved AiMesh backhaul stability.
- Improved Wireguard performance.
- Improved consistent display of client status on the WireGuard server.
- Improved stability when enabling or disabling the WireGuard server.
- Improved system stability when accessing the WireGuard Server with DMZ enabled.
- Improved memory utilization and fixed an occasional server error when registering DDNS with an app.
- Modified the USB application option text in dual WAN.
- Fixed network map bugs.
- Fixed memory leak issue.
- Fixed v6plus related Issues.
- Fixed ipv6 network service filter not work.
- Fixed the IPsec VPN compatibility issue with Win10.
- Fixed the reboot issue when assigning specific clients in VPN fusion.
- Fixed Client DOM Stored XSS vulnerability.
- Fixed the AiCloud login issue after unplugging and plugging the HDD into the USB port.
- Fixed the problem that the AiCloud app cannot add router on Android 9.
- Fixed the issue where Traffic Analyzer sometimes couldn't record data.
- Fixed the time display issue for the preferred upgrade time in the Auto Firmware Upgrade function.
- Fixed AiMesh preferred AP identification in site survey results.
- Fixed a bug encountered when adding a rule to the network services filter.
- Fine-tuned the description for port status.
- Resolved the issue with login and password changes.
- Resolved the IPSec VPN connection issues.
- Resolved OpenVPN Server TAP Mode Issue.
- Resolved the Instant Guard connection issues.
- Resolved an issue that caused hostname errors in the DDNS service.
- Resolved the ARP response issue, along with the connection issue between the router and the ROG Phone 6 and 7.
- Resolved the issue where the USB path is not displayed on the Media Server page in the AiMesh node.

Security updates:
- Enabled and supported ECDSA certificates for Let's Encrypt.
- Enhanced protection for credentials.
- Enhanced protection for OTA firmware updates.
- Enhanced protection against SSH brute force attacks.
- Fixed CVE-2022-46871.
- Fixed Client DOM Stored XSS.
- Fixed DoS vulnerabilities in httpd and firewall configuration pages.
- Fixed information disclosure vulnerability.
- Fixed null pointer dereference vulnerabilities.
- Fixed the cfg server vulnerability.
- Fixed FFmpeg vulnerabilities.
- Fixed OpenSSL vulnerabilities.
- Fixed several curl vulnerabilities.
- Fixed CVE-2023-28702 and CVE-2023-28703.
- Fixed an OpenVPN vulnerability categorized as CWE-134.
- Fixed the vulnerability in the logmessage function CVE-2023-35086/ CVE-2023-35087.
- Fixed security issues on the status page.

Please unzip the firmware file, and then verify the checksum.
SHA256: 40e0542072bf383edf67c28f4463d6b5c7e8b8234be547d0b72e2ad7626d2268

Download

 

[maxbraketorque]

Huge list of changes.

 

[johndoe85]

ASUS RT-AX68U Firmware version 3.0.0.4.388_24646
Version 3.0.0.4.388_24646
69.94 MB
2024/02/26
Bug Fixes and Enhancements：
- Enabled DynDNS and No-IP DDNS to use IPv6.
- Enabled WireGuard Server clients to access the Samba server.
- Enabled the failback function when using the iOS/Android USB backup WAN.
- Improved AiMesh backhaul stability.
- Improved Wireguard performance.
- Improved consistent display of client status on the WireGuard server.
- Improved stability when enabling or disabling the WireGuard server.
- Improved system stability when accessing the WireGuard Server with DMZ enabled.
- Improved memory utilization and fixed an occasional server error when registering DDNS with an app.
- Modified the USB application option text in dual WAN.
- Fixed network map bugs.
- Fixed memory leak issue.
- Fixed v6plus related Issues.
- Fixed ipv6 network service filter not work.
- Fixed the IPsec VPN compatibility issue with Win10.
- Fixed the reboot issue when assigning specific clients in VPN fusion.
- Fixed Client DOM Stored XSS vulnerability.
- Fixed the AiCloud login issue after unplugging and plugging the HDD into the USB port.
- Fixed the problem that the AiCloud app cannot add router on Android 9.
- Fixed the issue where Traffic Analyzer sometimes couldn't record data.
- Fixed the time display issue for the preferred upgrade time in the Auto Firmware Upgrade function.
- Fixed AiMesh preferred AP identification in site survey results.
- Fixed a bug encountered when adding a rule to the network services filter.
- Fine-tuned the description for port status.
- Resolved the issue with login and password changes.
- Resolved the IPSec VPN connection issues.
- Resolved OpenVPN Server TAP Mode Issue.
- Resolved the Instant Guard connection issues.
- Resolved an issue that caused hostname errors in the DDNS service.
- Resolved the ARP response issue, along with the connection issue between the router and the ROG Phone 6 and 7.
- Resolved the issue where the USB path is not displayed on the Media Server page in the AiMesh node.

Security updates:
- Enabled and supported ECDSA certificates for Let's Encrypt.
- Enhanced protection for credentials.
- Enhanced protection for OTA firmware updates.
- Enhanced protection against SSH brute force attacks.
- Fixed CVE-2022-46871.
- Fixed Client DOM Stored XSS.
- Fixed DoS vulnerabilities in httpd and firewall configuration pages.
- Fixed information disclosure vulnerability.
- Fixed null pointer dereference vulnerabilities.
- Fixed the cfg server vulnerability.
- Fixed FFmpeg vulnerabilities.
- Fixed OpenSSL vulnerabilities.
- Fixed several curl vulnerabilities.
- Fixed CVE-2023-28702 and CVE-2023-28703.
- Fixed an OpenVPN vulnerability categorized as CWE-134.
- Fixed the vulnerability in the logmessage function CVE-2023-35086/ CVE-2023-35087.
- Fixed security issues on the status page.

Please unzip the firmware file, and then verify the checksum.
SHA256: 40e0542072bf383edf67c28f4463d6b5c7e8b8234be547d0b72e2ad7626d2268

Download

They need to come with updates more often, and cut down on the number of different router versions in order to keep up with consistency of firmware updates.

 

[visortgw]

Huge list of changes.

Yes, they're playing catch up with this model as it's been well over a year since last update.

 

[johndoe85]

Yes, they're playing catch up with this model as it's been well over a year since last update.

I feel it's the same with my model, and it's less than a year ago a new update came.

 

[yikes]

New bug introduced: This firmware breaks my personalized WAN DNS Setting. If I select a preset (ex. Quad9) or manual DNS servers, it does not use that DNS. Issue confirmed on 3.0.0.4.388_24646 and Merlin's RT-AX68U_3004_388.6_2

I had to revert back to RT-AX68U_3004_388.6_0 to have it working again.

 

[mocamaster]

Can anyone confirm if the bug where you can't block internet access to a guest network device has been solved? I currently can only block internet for devices on my internal network but not on guest. Thank you.

 

[thesss6969]

This firmware completely F@#$ed my ethernet backhaul. Have this as my main, 2 AX55 satellites that were hard wired with Ethernet Backhaul mode on. Update bricked both satellites and after spending 2-3 hours WASTED trying to reset, resync, just went back to the previous firmware. What a joke ASUS

 

[L&LD]

Welcome to the forums @thesss6969.

Don't use Ethernet Backhaul mode 'on'. Known to be buggy.

This is one of the few settings that work best on Auto.

 

[Justinh]

Fixed FFmpeg vulnerabilities.

What does FFmpeg have to do with a router?

 

[bennor]

What does FFmpeg have to do with a router?

The UPnP media server in the firmware.

 

[RMerlin]

The UPnP media server in the firmware.

Thumbnails and info extraction, to be precise.

 

[L&LD]

Welcome to the forums @JNet.

Do you have a question or comment?

 

[JNet]

Regarding release 3.0.0.4.388_24646, within days after installing this release I started to experience intermittent loss of connectivity from a subset of (as few as 1 and as many as 10+) local WiFi devices. For the time being I have reverted to the prior release.

 

[jontalk]

Can only speak for myself, but the long awaited update seems to be working fine, though unlike most here, my needs are simple

 

[thesss6969]

Regarding release 3.0.0.4.388_24646, within days after installing this release I started to experience intermittent loss of connectivity from a subset of (as few as 1 and as many as 10+) local WiFi devices. For the time being I have reverted to the prior release.

Yep garbage update. I tried to hit asus, they just gave me a bs answer and closed the thread

 

[L&LD]

Most likely, a full reset to factory defaults is required once you flash the latest firmware. This will ensure that the new firmware is seeing and using the defaults it expects.

Simply flashing the latest firmware is not enough to properly evaluate it (at least, sometimes).

 

[d5aqoep]

They need to come with updates more often, and cut down on the number of different router versions in order to keep up with consistency of firmware updates.

More Isn’t Always Better

Reprint: F0606C Offering customers too many product choices may decrease their sense of well-being.

hbr.org

Dumb people at Asus still don't get it.

Have 3 or max 4 routers at best in any given point of time. The sheer amount of different routers causes the software development team to stretch too thin and everyone is unsatisfied with their purchase.

I am slowly moving away from Asus for this exact same thing and tired User interface from 2010's.

 

[L&LD]

Yes, they don't.

Harvard Business Review reprinting a professor of psychology paper from 2006 on business matters they know nothing of is not proof of anything business-related.

I believe Asus knows best how to run their business. Consumers need to educate themselves, not get frustrated at actual choices.

 

[Tech9]

The sheer amount of different routers

There is no other Asus router in this radio configuration. This was the only one. Very few products were ever released with BCM6710 for both 2.4GHz and 5GHz. Broadcom had issues with this chip. All products are now EoL. RT-AX68U was the last one still standing. Just based on hardware I predicted early EoL about 2 years ago. Good thing it never got popular and users burned are not so many. Unfortunately, Asus marketing was still recommending it as upgrade device days before EoL. It is what it is, time to move on.