Release ASUS ZenWiFi XD6 Firmware version 3.0.0.4.388_23773 (11-Aug-2023)

[ndiniwacho]

Version 3.0.0.4.388_23773 73.78 MB 2023/08/11

Security:
Fixed command injection vulnerabilities
Fixed remove ookla-IPQ956X
Fixed vulnerability in command injection after authentication
Fixed XSS potentially via malformed hostname in DHCP request
Fixed Fixed Stored Cross Site Scriptin
Fixed XSS attack via EXT3 USB in foldername
Fixed ping '-c' parameter in administration Network Tools is validated only on client side

Feature:
Fixed AiMesh related bugs.
Fixed minor GUI bugs.
Fixed bugs of Hinet MOD mesh IPTV.

ASUS ZenWiFi XD6 Series(XD6/XD6S)

AX5400 Whole-Home Dual-Band Mesh WiFi 6 System – Coverage up to 5,400 Sq. ft. / 4+ rooms, easy setup, life-time free network security & parental controls

www.asus.com

 

[jksmurf]

Fixed XSS attack via EXT3 USB in foldername

Sort of wondering why this FW has an apparent fix for USB for a device that ….doesn’t actually have a USB port. Maybe it shares some update change logs with devices that do.

Been a long time since this or indeed any of the XDx devices got FW updates (not that I’m missing anything). I have a pair of XD6 units.