Release ASUS GT-AX6000 Firmware version 3.0.0.6.102_34793 (2024/08/28)

[bennor]

As mentioned by @Erwin in the Release ASUS GT-AX6000 Firmware version 3.0.0.6.102_34791 thread, there is new firmware out for the GT-AX6000.

ASUS GT-AX6000 Firmware version 3.0.0.6.102_34793
Version 3.0.0.6.102_34793 61.74 MB 2024/08/28
Fixed injection vulnerability.

GT-AX6000 - Support

www.asus.com

 

[Morac]

My router updated itself last night.

 

[mirko991]

My router updated itself last night.

You have the auto firmware upgrade enabled. Mine didn't update itself.

 

[Mazz]

What would "Fixed injection vulnerability" be exactly?

 

[Morac]

What would "Fixed injection vulnerability" be exactly?

Injection Flaws | OWASP Foundation

Injection Flaws on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.

owasp.org

How bad it is depends on whether it requires being logged in or not and whether it’s exploitable from the WAN side. Since they pushed out this firmware solely to fix this one issue and less than a month after releasing the first firmware in over a year, I’m assuming it’s on the bad side.

It may be related to https://securityvulnerability.io/vulnerability/CVE-2024-42757
There was POC code released for that which would explain the rush.

 

[rflw]

I had a few odd issues after installing, rolled back after a day, reapplied today, no more issue

 

[RogerSC]

Working well here, no problems. Pretty simple home network configuration, though.

 

[KidJoe]

Mine is failing to install. I've tried using the update in the router's GUI, as well as downloading the file from Asus to my PC and uploading it to the router via wired PC.

Getting "Firmware upgrade unsuccessful. This may result from incorrect image or error transmission. Please check the version of firmware and try again."

I'm "stuck" on 3.0.0.6.102_34791-g92f56f9_385-g2830d

 

[Erwin]

Mine is failing to install. I've tried using the update in the router's GUI, as well as downloading the file from Asus to my PC and uploading it to the router via wired PC.

Getting "Firmware upgrade unsuccessful. This may result from incorrect image or error transmission. Please check the version of firmware and try again."

I'm "stuck" on 3.0.0.6.102_34791-g92f56f9_385-g2830d

You can try a factory reset to fix the issue.

 

[Erwin]

New firmware out for the GT-AX6000.

Version: 3.0.0.6.102_34797_404

 

[mirko991]

New firmware out for the GT-AX6000.

Version: 3.0.0.6.102_34797_404

It's great to see that even three years after its release, the router is still supported. Good job, ASUS!

 

[AntonK]

New firmware out for the GT-AX6000.

Version: 3.0.0.6.102_34797_404

Do you have a link to it? I'm not seeing it yet. Thx.

 

[mirko991]

Do you have a link to it? I'm not seeing it yet. Thx.

It's not yet published on the ASUS website, but you can find it by checking for updates directly from the router.

 

[visortgw]

Do you have a link to it? I'm not seeing it yet. Thx.

Use the currently published link, and edit version number.

 

[128bit]

. . . just curious, but is fusion/vpn still the ui abomination it's always been? merlin-ware's version is one of the major reasons, i went rogue.

 

[visortgw]

. . . just curious, but is fusion/vpn still the ui abomination it's always been? merlin-ware's version is one of the major reasons, i went rogue.

Merlin is not rogue! I only use Asus firmware for AiMesh nodes.

 

[128bit]

Merlin is not rogue! I only use Asus firmware for AiMesh nodes.

. . . and your POINT??!

are you ok? by that, i mean literate? i NEVER wrote that "merlin" was rogue! perhaps you need help with your ENGLISH. i described my own act (rogue), k. now i certainly have some thoughts about you, but this is a family board.

 

[thiggins]

@128bit No need for personal attack. Next one will get you a time-out.

 

[Morac]

This is the release notes for the new firmware.

Firmware version 3.0.0.6_102_34797-g974b24d_404-ge7bfb
- Release Note -

Bug Fixes and Enhancements:

1. Optimized memory management mechanisms, improving system efficiency and stability.
2. Strengthened input validation and data processing workflows, further protecting your information security.
3. Improved web rendering engine, enhancing browsing experience and security.
4. Enhanced security of system command processing to guard against potential malicious operations.
5. Perfected JavaScript-related security mechanisms, offering a more secure web interaction environment.