AC-86u vulnerability tracking post-EoL (asuswrt-merlin 386.14_2)

[JTnola]

Wondering if anyone is tracking (unpatched) critical vulnerabilities for End of Life (no longer supported) AC models running asuswrt-merlin FW-386.14_2 …?

Thank you!!

 

[dave14305]

How would anyone reasonably know an unpatched vulnerability existed? You must assume they do exist, but tracking them seems futile if you know no future firmware update is coming. I’m sure there are hackers out there tracking them for future exploitation.

If you’re just comparing to stock firmware releases, that’s easy enough but not always directly comparable to a Merlin release.

Time and energy are better spent saving up for a new router and relegate the AC routers as access points behind a more current router/firewall.

 

[JTnola]

How would anyone reasonably know an unpatched vulnerability existed? You must assume they do exist, but tracking them seems futile if you know no future firmware update is coming. I’m sure there are hackers out there tracking them for future exploitation.

If you’re just comparing to stock firmware releases, that’s easy enough but not always directly comparable to a Merlin release.

Time and energy are better spent saving up for a new router and relegate the AC routers as access points behind a more current router/firewall.

i see your latter point, in re: “time better spent”, but it’s entire plausible that someone who regularly pays attention to such things would be aware of vulnerabilities impacting asuswrt/asuswrt-merlin that would only be rectified by ongoing FW updates.

 

[Tech9]

No firmware updates are expected so tracking vulnerabilities for an EoL device is kind of pointless. Lock the router with nothing exposed to Internet and just continue using it. No need to stress yourself. There is no guarantee supported router won't be hit by malware. It happened recently and based on user reports "unsupported" devices had no issues, "supported" suffered some damages.

 

[Viktor Jaep]

I wonder if there's a Windows 95 unpatched vulnerabililty list floating around. I could really use one. I know it's EoL. Asking for a friend.

 

[ramthrou]

I wonder if there's a Windows 95 unpatched vulnerabililty list floating around. I could really use one. I know it's EoL. Asking for a friend.

No problem. Here you go:

Microsoft Windows 95 : Security vulnerabilities, CVEs

Security vulnerabilities of Microsoft Windows 95 : List of vulnerabilities affecting any version of this product

www.cvedetails.com

No problem.

 

[Viktor Jaep]

No problem. Here you go:

Microsoft Windows 95 : Security vulnerabilities, CVEs

Security vulnerabilities of Microsoft Windows 95 : List of vulnerabilities affecting any version of this product

www.cvedetails.com

View attachment 65878
No problem.

Not super helpful since the vast majority of CVEs don't even go beyond 2002, and doesn't list any current vulnerabilities... like what you were asking for.