RT-AC88U - 3.0.0.4.382.18991 (New features)

[Odkrys]

2017/11/24 44.77 MBytes
ASUS RT-AC88U Firmware version 3.0.0.4.382.18991
Security fixed
- Fixed CVE-2017-14491: DNS - 2 byte heap based overflow
- Fixed CVE-2017-14492: DHCP - heap based overflow
- Fixed CVE-2017-14493: DHCP - stack based overflow
- Fixed CVE-2017-14494: DHCP - info leak
- Fixed CVE-2017-14495: DNS - OOM DoS
- Fixed CVE-2017-14496: DNS - DoS Integer underflow
- Fixed CVE-2017-13704 : Bug collision
- Fixed predictable session tokens, logged user IP validation, Logged-in information disclosure (special thanks for Blazej Adamczyk contribution)
- Fixed web GUI authorization vulnerabilities.
- Fixed AiCloud XSS vulnerabilities
- Fixed web history XSS vulnerabilities (special thanks for Jamie Riden of NCC Group)

New features
- Added IPSec VPN server
- Supported Alexa
- Supported IFTTT
- Supported Let's encrypt to help get free Certificate Authority (CA). To enable this feature, router needs to obtain public IP from ISP

Bug Fixed
- Fixed IPTV related issue
- Fixed IGMP snooping related issue.

http://dlcdnet.asus.com/pub/ASUS/wireless/RT-AC88U/FW_RT_AC88U_300438218991.ZIP

 

[fearz]

God! When for ac5300?


Sent from my iPhone using Tapatalk

 

[Gregory Phillips]

I just updated to this new firmware when I saw it offered in the GUI so I can't comment on its performance yet.

 

[sanke1]

I am unable to get Lets Encrypt certificate. For 1 hr I am stuck at Updating.

So still stuck at updating after 9 hrs.

 

[SystemF]

Guys is it i'm only one but the MD5 code verification doesn't match with extracted file.? What i used:
1.http://onlinemd5.com/
2.Cmd on win7 with command: certutil -hashfile RT-AC88U_3.0.0.4_382_18991-gc0b6a33.trx MD5
3. Installed MD5 Checksum Verifyer

What's going on? The code i get after check is :
069f31789d037948600a309537b6ba2b

This is from ASUS website:
Please unzip the firmware file first then check the MD5 code.
MD5: 03689b59108c932e8cf379473813946e

 

[skypx]

Guys is it i'm only one but the MD5 code verification doesn't match with extracted file.? What i used:
1.http://onlinemd5.com/
2.Cmd on win7 with command: certutil -hashfile RT-AC88U_3.0.0.4_382_18991-gc0b6a33.trx MD5
3. Installed MD5 Checksum Verifyer

What's going on? The code i get after check is :
069f31789d037948600a309537b6ba2b

This is from ASUS website:
Please unzip the firmware file first then check the MD5 code.
MD5: 03689b59108c932e8cf379473813946e

It's not you, doesn't match here either.

 

[SystemF]

Anyone tested the vlans for the iptv is it working correctly this time? I'm not yet updating to the new firm., will wait...

 

[sanke1]

Error log shows this

Nov 25 18:40:01 rc_service: service 4891:notify_rc restart_letsencrypt
Nov 26 00:10:10 kernel: /usr/sbin/acme-client: https://acme-v01.api.letsencrypt.org/acme/new-authz: bad HTTP: 403
Nov 26 00:10:10 kernel: /usr/sbin/acme-client: transfer buffer: [{ "type": "urn:acme:error:unauthorized", "detail": "No registration exists matching provided key", "status": 403 }] (120 bytes)
Nov 25 18:40:01 rc_service: service 4891:notify_rc restart_letsencrypt
Nov 26 00:10:10 kernel: /usr/sbin/acme-client: https://acme-v01.api.letsencrypt.org/acme/new-authz: bad HTTP: 403
Nov 26 00:10:10 kernel: /usr/sbin/acme-client: transfer buffer: [{ "type": "urn:acme:error:unauthorized", "detail": "No registration exists matching provided key", "status": 403 }] (120 bytes)

So it seems like ASUS has implemented the https certificate method but Lets Encrypt website is not accepting any registrations. The feature is not enabled yet on server side.

 

[WDV]

I am unable to get Lets Encrypt certificate. For 1 hr I am stuck at Updating.

So still stuck at updating after 9 hrs.

I can register ASUS DDNS with Let's Encryption certificate with no problem. Maybe you try another domain name or restore router to default setting and try again.

 

[sanke1]

I can register ASUS DDNS with Let's Encryption certificate with no problem. Maybe you try another domain name or restore router to default setting and try again.

I reset the router by using WPS button method. Still I keep on getting Updating. I also set login to https login for both LAN and WAN as per ASUS website.

And system log says

Nov 27 09:40:09 kernel: /usr/sbin/acme-client: https://acme-v01.api.letsencrypt.org/acme/new-authz: bad HTTP: 403
Nov 27 09:40:09 kernel: /usr/sbin/acme-client: transfer buffer: [{ "type": "urn:acme:error:unauthorized", "detail": "No registration exists matching provided key", "status": 403 }] (120 bytes)

It seems like my router cannot reach letsencrypt servers.

 

[NSNE]

So it seems like ASUS has implemented the https certificate method but Lets Encrypt website is not accepting any registrations. The feature is not enabled yet on server side.

Are you using DNS-O-Matic? I had a problem with that service because it's designed to update other service, not function as a DDNS service in and of itself. Once I picked a specific DDNS provider, Let's Encrypt provided me with a certificate.

 

[sanke1]

I am using ASUS DDNS service.

 

[PAPPL]

Intermittent disconnects (no visible WLAN SSID for some minutes) with this firmware.
Even with factory reset.
Seems like the router reboots wireless-part.
Streaming Video interrupts often.
Reverted back to stable RT-AC88U_3.0.0.4_380_7743.

 

[Gregory Phillips]

Yesterday and this morning I've seen some random disconnects and slowdowns on this firmware. I just power cycled the router leaving it off long enough to drain the power and will report back if this behavior persists which will force me to revert to the previous version.

 

[SystemF]

So the new firm is again crap........I'm strongly against this power cycles, if something is doing right will not be necessary to power off/on......

 

[Gregory Phillips]

Well power cycling allows stray errata to evacuate system memory which has helped me several times with this router.

 

[Dr Tone]

It's very odd how some have nothing but problems and the last 2 firmwares have been the most stable for me.


Knock on wood!

 

[fax]

Also for me all is moving nicely, no slowdown no speed drop... keep counting the days.

 

[Gregory Phillips]

Intermittent disconnects (no visible WLAN SSID for some minutes) with this firmware.
Even with factory reset.
Seems like the router reboots wireless-part.
Streaming Video interrupts often.
Reverted back to stable RT-AC88U_3.0.0.4_380_7743.

I just experienced the disconnect again so I rolled back to 15850.

 

[bradbort]

I tried this firwmare and had lots of dropped/frozen clients. Once my teens started screaming, I rolled it back to the much more stable Merlin Alpha build. It's a shame. It has some interesting new features.