Release ASUS RT-AX86U Firmware version 3.0.0.4.386.46061 (2022/01/11)

[dark]

Version 3.0.0.4.386.46061
2022/01/11 75.31 MBytes
ASUS RT-AX86U Firmware version 3.0.0.4.386.46061
Security
- Fixed string format stacks vulnerability
- Fixed cross-site-scripting vulnerability
- Fixed informational vulnerability.
Thanks to Howard McGreehan.

-Fixed SQL injection vulnerability
-Fixed json file traversal vulnerability
-Fixed plc/port file traversal vulnerability
-Fixed stack overflow vulnerability
Thanks to HP of Cyber Kunlun Lab

-Fixed authenticated stored XSS vulnerability
Thanks to Luke Walker – SmartDCC

-Fixed LPD denial of service vulnerability
-Fixed cfgserver heap overflow vulnerability
-Fixed cfgserver denial of service vulnerability
Thanks to TianHe from BeFun Cyber Security Lab.

Added more ISP profile
Digi 1 - TM
Digi 2 - TIME
Digi 3 - Digi
Digi 4 - CTS
Digi 5 - ALLO
Digi 6 - SACOFA
Maxis - CTS
Maxis - SACOFA
Maxis - TNB/ALLO

Fixed AiMesh guest network issues.
Fixed DDNS issues where the WAN IP is IPv6
Fixed UI bugs in Administration --> feedback.
Fixed time zone error.
Improved the connection stability.

 

[OzarkEdge]

Link: RT-AX86U｜WiFi Routers｜ASUS USA

OE

 

[2ruderudy]

Thanks for the link and changelog details.

Anyone have a chance to test this out yet?

 

[tallytr]

auto-updated for me last night, working fine...

 

[Paliv]

Did this release happen to bring back DNS Filter?

 

[bbunge]

Did this release happen to bring back DNS Filter?

No

 

[Paliv]

No

Thanks, it's the one feature I really use in Merlin. I was very happy when it was in Stock for one release.

 

[KevTech]

Direct link: https://dlcdnets.asus.com/pub/ASUS/wireless/RT-AX86U/FW_RT_AX86U_300438646061.zip

 

[Tech9]

I was very happy when it was in Stock for one release.

Wasn't it in beta firmware only?

 

[Paliv]

Wasn't it in beta firmware only?

It was actually in the release for one build late summer/early fall if memory serves me. But, they took it out the next release due to a problem they didn’t disclose. I’ve never run a beta firmware.

 

[OzarkEdge]

Why not just link to the file?

In the interest of safe computing, I prefer to browse to the source page and select the download link myself. So I assume the same for others.

OE

 

[bbunge]

Look at some of the other posts for firmware and you will see people post a link directly to the file from Asus.
Been that way for the 10 years I have been here and most likely before that.
All you have to do is verify the download source when the download window comes up.
The way you do it adds more clicks to get the same result.

View attachment 38532

In the greater scheme of things, it does not matter. Please focus on things that are helpful.

 

[L&LD]

Just because others have been doing things incorrectly, it doesn't matter how long it has gone on, it is still incorrect (if you value your digital security).

I much prefer @OzarkEdge's method to links.

 

[RogerSC]

In the interest of safe computing, I prefer to browse to the source page and select the download link myself. So I assume the same for others.

OE

I like it even better that there's an md5 checksum that I can verify. That gives me a nice warm feeling *smile*.

 

[Tech9]

But, they took it out the next release due to a problem they didn’t disclose.

This option can't be called DNSFilter in official Asuswrt. See what DNSFilter is:

DNS Filtering, Security & Website Blocking Software | DNSFilter

Try DNSFilter's industry-leading protective DNS, content filtering and website blocking solutions; a trusted security service for 35,000+ businesses.

www.dnsfilter.com

 

[L&LD]

I stated why I believe it is incorrect. You can believe what you like, but what I believe does matter.

The forum is certainly taking a downturn now.

 

[whitey019]

L&LD, your fine. The firmware is not hard to find regardless.

 

[tallytr]

L&LD, your fine. The firmware is not hard to find regardless.

No need to find it, just click on auto-update and let go, I did.
Do not sweat the small stuff

 

[Paliv]

This option can't be called DNSFilter in official Asuswrt. See what DNSFilter is:

DNS Filtering, Security & Website Blocking Software | DNSFilter

Try DNSFilter's industry-leading protective DNS, content filtering and website blocking solutions; a trusted security service for 35,000+ businesses.

www.dnsfilter.com

That was the speculation as to why it was taken back out, since it was Merlin code that had been added. Regardless it still isn’t there and may not return, which is disappointing.

 

[Tech9]

That was the speculation

Asuswrt already contains RMerlin's code. This function is perhaps coming back with RC3 official release and for selected models, but named differently.