Release ASUS RT-AX88U Firmware version 3.0.0.4.388.22525 (16-02-2023)

[Tech9]

I'm checking quite often for RT-AX86U new firmware. I want to test something found broken on current and reported to Asus.

 

[wol-shiver]

Is the ax88u typically last to get new FW updates ? Its super stable but just wondering

 

[L&LD]

No. Everyone with a different model Asus router feels like that though at one time or another. It will be updated asap. Not sooner. Limited resources, limited time, and too many SKUs.

 

[Gregory Phillips]

Amazing how there are no firmware updates to this router since February and now the signature hasn't been updated in a month.

 

[d5aqoep]

No. Everyone with a different model Asus router feels like that though at one time or another. It will be updated asap. Not sooner. Limited resources, limited time, and too many SKUs.

I believe all the Non-Pro skus will receive step motherly treatment hence forth as Asus is busy in cooking x.0.0.6.102_xxxx firmwares for newer Broadcom SOC

 

[L&LD]

Not all (but for sure, most). There are a few models that will get that love too.

I feel that with WiFi 7, Gen 2+, this need to constantly feel an upgrade is necessary will be greatly curbed. In a year or so.

But, who knows what they will tempt us with!

 

[wol-shiver]

Amazing how there are no firmware updates to this router since February and now the signature hasn't been updated in a month.

Updated signatures as of 06/07.

 

[Gregory Phillips]

4 months without a firmware update kind of makes me feel like this unit is EOL.

 

[wol-shiver]

4 months without a firmware update kind of makes me feel like this unit is EOL.

I have a feeling when they roll out the 89x beta to production, we'll see new FW for this and the 92 around the same time.

They are rolling out beta for 89x weekly.

I know soc aren't same but release may be candidated on the 89x at this point.

 

[d5aqoep]

Non-Pro

4 months without a firmware update kind of makes me feel like this unit is EOL.

It's definitely not EOL but it will receive less frequent firmware updates and be feature locked to 388 firmware. You have to upgrade to Pro Model or any model having Broadcom CPU BCM4912

 

[hsm06]

AX88U FW: 3.0.0.4.388_23748 is now available download.

https://dlcdnets.asus.com/pub/ASUS/wireless/RT-AX88U/FW_RT_AX88U_300438823748.zip?model=RT-AX88U

New features:
-Built-in Surfshark in VPN Fusion allows you to surf the internet anonymously and securely from anywhere by encrypting connections. Please refer to https://asus.click/SurfsharkVPN

-iPhone/Android USB auto backup WAN allows you to connect your phone to the router’s USB port and use it as an internet source. Please refer to https://asus.click/AutobackupWAN

-DDNS transfer allows you to transfer your ASUS DDNS hostname from your original router to the new one. Please refer to https://asus.click/ASUSDDNS

Bug fixes and functionality modifications:
-Resolved the issue with login and password changes.
-Resolved the IPSec VPN connection issues.
-Resolved the Instant Guard connection issues.
-Fixed the issue where Traffic Analyzer sometimes couldn't record data.
-Fixed the time display issue for the preferred upgrade time in the Auto Firmware Upgrade function.
-Enabled DynDNS and No-IP DDNS to use IPv6.
-Fixed AiMesh preferred AP identification in site survey results.
-Updated timezone list for Greenland, Mexico, and Iran.
-Allowed WireGuard Server clients to access the Samba server.
-Resolved the issue where the USB path is not displayed on the Media Server page in the AiMesh node

Security updates:
-Enabled and supported ECDSA certificates for Let's Encrypt.
-Allowed binding DDNS to a user's account to reduce the risk of MITM attacks
-Enhanced protection for credentials.
-Enhanced protection for OTA firmware updates.
-Fixed CVE-2023-34359,CVE-2023-34358 Unauthenticated Denial of Service
-Fixed CVE-2023-34360 Stored XSS
-Fixed DoS vulnerabilities in firewall configuration pages.
-Fixed DoS vulerabilities in httpd.
-Fixed information disclosure vulnerability.
-Fixed CVE-2023-28702 and CVE-2023-28703.
-Fixed null pointer dereference vulnerabilities.
-Fixed the cfg server vulnerability.
-Fixed the vulnerability in the logmessage function CVE-2023-35086/ CVE-2023-35087.
-Fixed lighttpd vulnerability, CVE-2023-35720.
-Fixed several curl vulnerabilities including CVE-2023-28322, CVE-2023-28321, and CVE-2023-28319.
-Fixed FFmpeg vulnerabilities, specifically CVE-2022-3964, CVE-2022-48434, and CVE-2022-3109.
-Fixed openssl vulnerability, CVE-2023-0464.
-Fixed ReadyMedia vulnerabilitym CVE-2020-28926.
-Fixed UPnP vulnerability CVE-2020-12695.
-Patched a command injection vulnerability to improve overall security.
-Strengthened protection against SSH brute force attacks.

 

[octopus]

AX88U FW: 3.0.0.4.388_23748 is now available download.

https://dlcdnets.asus.com/pub/ASUS/wireless/RT-AX88U/FW_RT_AX88U_300438823748.zip?model=RT-AX88U

New features:
-Built-in Surfshark in VPN Fusion allows you to surf the internet anonymously and securely from anywhere by encrypting connections. Please refer to https://asus.click/SurfsharkVPN

-iPhone/Android USB auto backup WAN allows you to connect your phone to the router’s USB port and use it as an internet source. Please refer to https://asus.click/AutobackupWAN

-DDNS transfer allows you to transfer your ASUS DDNS hostname from your original router to the new one. Please refer to https://asus.click/ASUSDDNS

Bug fixes and functionality modifications:
-Resolved the issue with login and password changes.
-Resolved the IPSec VPN connection issues.
-Resolved the Instant Guard connection issues.
-Fixed the issue where Traffic Analyzer sometimes couldn't record data.
-Fixed the time display issue for the preferred upgrade time in the Auto Firmware Upgrade function.
-Enabled DynDNS and No-IP DDNS to use IPv6.
-Fixed AiMesh preferred AP identification in site survey results.
-Updated timezone list for Greenland, Mexico, and Iran.
-Allowed WireGuard Server clients to access the Samba server.
-Resolved the issue where the USB path is not displayed on the Media Server page in the AiMesh node

Security updates:
-Enabled and supported ECDSA certificates for Let's Encrypt.
-Allowed binding DDNS to a user's account to reduce the risk of MITM attacks
-Enhanced protection for credentials.
-Enhanced protection for OTA firmware updates.
-Fixed CVE-2023-34359,CVE-2023-34358 Unauthenticated Denial of Service
-Fixed CVE-2023-34360 Stored XSS
-Fixed DoS vulnerabilities in firewall configuration pages.
-Fixed DoS vulerabilities in httpd.
-Fixed information disclosure vulnerability.
-Fixed CVE-2023-28702 and CVE-2023-28703.
-Fixed null pointer dereference vulnerabilities.
-Fixed the cfg server vulnerability.
-Fixed the vulnerability in the logmessage function CVE-2023-35086/ CVE-2023-35087.
-Fixed lighttpd vulnerability, CVE-2023-35720.
-Fixed several curl vulnerabilities including CVE-2023-28322, CVE-2023-28321, and CVE-2023-28319.
-Fixed FFmpeg vulnerabilities, specifically CVE-2022-3964, CVE-2022-48434, and CVE-2022-3109.
-Fixed openssl vulnerability, CVE-2023-0464.
-Fixed ReadyMedia vulnerabilitym CVE-2020-28926.
-Fixed UPnP vulnerability CVE-2020-12695.
-Patched a command injection vulnerability to improve overall security.
-Strengthened protection against SSH brute force attacks.

Why do you announce new software inside this tree??? (That is bad habit)

ASUS RT-AX88U Firmware version 3.0.0.4.388.22525 (16-02-2023)​