RT-AX55 Vulnerabilities?

[jplw]

My RT-66U B1 just died and I have replaced it with an RT-AX55. I was surprised that the latest firmware for the AX55 is 3.0.0.4.386_45934, whereas the 66U B1 was at 3.0.0.4.386_48262. I know that the firmware numbers are directly comparable, but the AX55 has not been updated since November 2021, and the 66U B1 has had several security updates since then.

Does this mean that the AX55 is more vunerable at this point i time?

 

[Tech9]

Does this mean that the AX55 is more vunerable at this point i time?

In theory - yes. It's missing latest available security patches.

 

[jplw]

In theory - yes. It's missing latest available security patches.

That is what I thought. They denied that on the phone, saying it is a newer model and does not have those recently-patched vulnerabilities. I did not believe them. Any insight as to why they patch and older (66U) model long before a new one?

 

[Tech9]

Any insight as to why they patch and older (66U) model long before a new one?

This AC66U B1 model is AC68U variant - perhaps the most popular Asus router. It usually gets firmware updates faster than others.

RT-AC68U / RT-AC68P / RT-AC1900 / RT-AC1900P

This post is a little wrap up of lot of post regarding the RT-AC68 and RT-AC1900 series router. Below tables are compiled from currently available information I have: FW => .380 indicates 3.0.0.4.380 or higher with an updated SDK is required. For further reference, here a comparison of...

www.snbforums.com

 

[nickie]

Yes, a firmware update is overdue, but you can try the beta in this thread as I believe it's an update relative to the current official version. I haven't tried as mine is working as a node with a TUF-AX5400 as main, but the comments are fairly positive regarding the beta version.

 

[jplw]

Thank you. Interstingly, I got an email from ASUS regarding the latest Russion threat that effects ASUS (Cyclops Blink). The email said:

Affected products
GT-AC5300 firmware under 3.0.0.4.386.xxxx
GT-AC2900 firmware under 3.0.0.4.386.xxxx
RT-AC5300 firmware under 3.0.0.4.386.xxxx
RT-AC88U firmware under 3.0.0.4.386.xxxx
RT-AC3100 firmware under 3.0.0.4.386.xxxx
RT-AC86U firmware under 3.0.0.4.386.xxxx
RT-AC68U, AC68R, AC68W, AC68P firmware under 3.0.0.4.386.xxxx
RT-AC66U_B1 firmware under 3.0.0.4.386.xxxx
RT-AC3200 firmware under 3.0.0.4.386.xxxx
RT-AC2900 firmware under 3.0.0.4.386.xxxx
RT-AC1900P, RT-AC1900P firmware under 3.0.0.4.386.xxxx
RT-AC87U (EOL)
RT-AC66U (EOL)
RT-AC56U (EOL)

Interstingly, the AX55 was not on the list, suggesting that it may indeed not need all the security updates that the 66U B1 did.

 

[RMerlin]

Thank you. Interstingly, I got an email from ASUS regarding the latest Russion threat that effects ASUS (Cyclops Blink). The email said:

Affected products
GT-AC5300 firmware under 3.0.0.4.386.xxxx
GT-AC2900 firmware under 3.0.0.4.386.xxxx
RT-AC5300 firmware under 3.0.0.4.386.xxxx
RT-AC88U firmware under 3.0.0.4.386.xxxx
RT-AC3100 firmware under 3.0.0.4.386.xxxx
RT-AC86U firmware under 3.0.0.4.386.xxxx
RT-AC68U, AC68R, AC68W, AC68P firmware under 3.0.0.4.386.xxxx
RT-AC66U_B1 firmware under 3.0.0.4.386.xxxx
RT-AC3200 firmware under 3.0.0.4.386.xxxx
RT-AC2900 firmware under 3.0.0.4.386.xxxx
RT-AC1900P, RT-AC1900P firmware under 3.0.0.4.386.xxxx
RT-AC87U (EOL)
RT-AC66U (EOL)
RT-AC56U (EOL)

Interstingly, the AX55 was not on the list, suggesting that it may indeed not need all the security updates that the 66U B1 did.

AFAIK, the RT-AX55 didn't exist before 386.xxxx.

 

[jplw]

It did. Mine came with 3.0.0.4.384.

 

[RMerlin]

It did. Mine came with 3.0.0.4.384.

Gotcha. I see it was launched in May 2020, I thought it was launched much later after the RT-AX56U and RT-AX58U.