Menu
What's new
By:
Filters Better Search

Firmware Update for AX86U (8-31-2021)

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

A

Ameenhuus

Occasional Visitor
ASUS RT-AX86 Series(RT-AX86U/RT-AX86S) Firmware version 3.0.0.4.386.45375
This version includes several vulnerability patches.
BusyBox
- CVE-2016-2148
- CVE-2016-6301
- CVE-2018- 1000517

cURL
- CVE-2020-8169
- CVE-2019-5481
- CVE-2019-5482
- CVE-2018-1000120
- CVE-2018- 1000300
- CVE-2018-16839

Lighttpd
- CVE-2018-19052

Linux
- CVE-2020-14305
- CVE-2020-25643
- CVE-2019-19052

lldpd
- CVE-2020-27827

Avahi
- CVE-2017-6519

hostapd
- CVE-2021-30004
- CVE-2019-16275

OpenVPN
- CVE-2020-11810
- CVE-2020-15078

wpa
- CVE-2021-30004
- CVE-2021-27803
- CVE-2019-11555
- CVE-2019-9499
- CVE-2019-9498
- CVE-2019-9497
- CVE-2019-9496
- CVE-2019-9495
- CVE-2019-9494
- CVE-2017-13086
- CVE-2017-13084
- CVE-2017-13082
- CVE-2016-4476
- CVE-2015-8041

Fixed DoS vulnerability from spoofed sae authentication frame. Thanks to Efstratios Chatzoglou, University of the Aegean, Georgios Kambourakis, European Commission at the European Joint Research Centre, and Constantinos Kolias, University of Idaho.

Fixed envrams exposed issue. Thanks to Quentin Kaiser from IoT Inspector Research Lab contribution.

Please unzip the firmware file first then check the MD5 code.
MD5: 97009cd613c92155e69fe476a7fc22d6
 
Ameenhuus said:
ASUS RT-AX86 Series(RT-AX86U/RT-AX86S) Firmware version 3.0.0.4.386.45375
This version includes several vulnerability patches.
BusyBox
- CVE-2016-2148
- CVE-2016-6301
- CVE-2018- 1000517

cURL
- CVE-2020-8169
- CVE-2019-5481
- CVE-2019-5482
- CVE-2018-1000120
- CVE-2018- 1000300
- CVE-2018-16839

Lighttpd
- CVE-2018-19052

Linux
- CVE-2020-14305
- CVE-2020-25643
- CVE-2019-19052

lldpd
- CVE-2020-27827

Avahi
- CVE-2017-6519

hostapd
- CVE-2021-30004
- CVE-2019-16275

OpenVPN
- CVE-2020-11810
- CVE-2020-15078

wpa
- CVE-2021-30004
- CVE-2021-27803
- CVE-2019-11555
- CVE-2019-9499
- CVE-2019-9498
- CVE-2019-9497
- CVE-2019-9496
- CVE-2019-9495
- CVE-2019-9494
- CVE-2017-13086
- CVE-2017-13084
- CVE-2017-13082
- CVE-2016-4476
- CVE-2015-8041

Fixed DoS vulnerability from spoofed sae authentication frame. Thanks to Efstratios Chatzoglou, University of the Aegean, Georgios Kambourakis, European Commission at the European Joint Research Centre, and Constantinos Kolias, University of Idaho.

Fixed envrams exposed issue. Thanks to Quentin Kaiser from IoT Inspector Research Lab contribution.

Please unzip the firmware file first then check the MD5 code.
MD5: 97009cd613c92155e69fe476a7fc22d6
Click to expand...
Wow, that's quite a list of CVEs, perhaps a new record (without checking, or knowing how serious they are).
 
New ASUS firmware out today for AX86U - 3.0.0.4.386.45375

Version 3.0.0.4.386.45375

2021/08/31 74.93 MBytes

ASUS RT-AX86 Series(RT-AX86U/RT-AX86S) Firmware version 3.0.0.4.386.45375
This version includes several vulnerability patches.
BusyBox
- CVE-2016-2148
- CVE-2016-6301
- CVE-2018- 1000517

cURL
- CVE-2020-8169
- CVE-2019-5481
- CVE-2019-5482
- CVE-2018-1000120
- CVE-2018- 1000300
- CVE-2018-16839

Lighttpd
- CVE-2018-19052

Linux
- CVE-2020-14305
- CVE-2020-25643
- CVE-2019-19052

lldpd
- CVE-2020-27827

Avahi
- CVE-2017-6519

hostapd
- CVE-2021-30004
- CVE-2019-16275

OpenVPN
- CVE-2020-11810
- CVE-2020-15078

wpa
- CVE-2021-30004
- CVE-2021-27803
- CVE-2019-11555
- CVE-2019-9499
- CVE-2019-9498
- CVE-2019-9497
- CVE-2019-9496
- CVE-2019-9495
- CVE-2019-9494
- CVE-2017-13086
- CVE-2017-13084
- CVE-2017-13082
- CVE-2016-4476
- CVE-2015-8041

Fixed DoS vulnerability from spoofed sae authentication frame. Thanks to Efstratios Chatzoglou, University of the Aegean, Georgios Kambourakis, European Commission at the European Joint Research Centre, and Constantinos Kolias, University of Idaho.

Fixed envrams exposed issue. Thanks to Quentin Kaiser from IoT Inspector Research Lab contribution.
Click to expand...
 
The version list fails to mention that DoT and DNS Filter are included in this release. This is a big plus and a feather in Merlin's bonnet as Asus used his code!
Thanks Eric!!!
There are more changes coming for the AX series. One is Wireguard.
 
Firmware works for me
 
@bbunge Wiregaurd VPN sounds intriguing. :D

I am wondering what ever happened to that past reported channel extension coming to the 5Ghz band.
 
Last edited:
bbunge said:
The version list fails to mention that DoT and DNS Filter are included in this release. This is a big plus and a feather in Merlin's bonnet as Asus used his code!
Thanks Eric!!!
There are more changes coming for the AX series. One is Wireguard.
Click to expand...
Any idea why there are frequent ASUS acknowledgments of contributions for patches etc from others but NEVER [that I have seen] from their greatest individual improvements contributor ... @RMerlin ???
 
They have given him credit. I remember seeing Asus reference RMerlin in previous firmware updates for Asus AC routers.
 
kernol said:
Any idea why there are frequent ASUS acknowledgments of contributions for patches etc from others but NEVER [that I have seen] from their greatest individual improvements contributor ... @RMerlin ???
Click to expand...
They did it early on. Over time they probably just figured it was pointless to mention it every time it occurred. And I'm fine with that.
 
Wireguard sounds intriguing! Anyone here planning on switching to it from OpenVPN?
 
RMerlin said:
They did it early on. Over time they probably just figured it was pointless to mention it every time it occurred. And I'm fine with that.
Click to expand...
Do Asus pay you for your code? Just wondering.
 
With this new firmware I am seeing:
dnsmasq-dhcp[1366]: DHCPACK(br0) ... lines in my System log....

not concerned, just not sure what it means....
 
You must log in or register to reply here.

Similar threads

B
Release ASUS RT-AX89X Firmware version 3.0.0.4.388_32407
2
Replies
34
Views
8K
Riderek
R
Voxel
Voxel Custom firmware build for Orbi RBK50/RBK53 (RBR50, RBS50) v. 9.2.5.2.31SF-HW
Replies
18
Views
3K
alexnev
A
Voxel
Voxel Custom firmware build for Orbi LBR20 v. 9.2.5.2.41SF-HW
Replies
2
Views
973
Cheezits
C
L
Release ASUS RT-AX88U Firmware version 3.0.0.4.388.20558 (2022/09/21)
2
Replies
33
Views
11K
liqiang2020
L
OzarkEdge
Release ASUS RT-AC86U 3.0.0.4.386.45956 2021/11/25
3 4 5
Replies
80
Views
21K
cesarleeds
C
Similar threads
Thread starter Title Forum Replies Date
W Asus GT-AXE11000 and RT-AX86U any Firmware update? ASUSWRT - Official 25
G Release Asus ZenWiFi XD4 Mini - Firmware Update 3.0.0.4_388_25106 (Nov 18 2024) ASUSWRT - Official 6
J Xt9 firmware update, anyone try? ASUSWRT - Official 1
Morac ASUS Firmware update privacy policy? ASUSWRT - Official 19
jixiangyuan BE96 Firmware Update 3.0.0.6.102_34777 ASUSWRT - Official 0
D Is Asus RT AX3000 v2 going to receive a firmware update? ASUSWRT - Official 15
G XD4 firmware update - still supported ASUSWRT - Official 3
F Release ASUS TUF-AX5400 Firmware version 3.0.0.4.388_24194 (2024/11/22) ASUSWRT - Official 0
F Release ASUS ZenWiFi ET9 Firmware version 3.0.0.4.388_25146 (2024/11/19) ASUSWRT - Official 0
F Release ASUS TUF-AX3000 V2 Firmware version 3.0.0.4.388_23848 (2024/11/19) ASUSWRT - Official 2

Similar threads

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!

Members online

Total: 579 (members: 13, guests: 566)
Top